| 词条 | SigSpoof |
| 释义 |
In un-patched versions of affected software, SigSpoof attacks allow cryptographic signatures to be convincingly spoofed, under certain circumstances.[5][6][2][8] This potentially enables a wide range of subsidiary attacks to succeed.[5][6][2][8] According to Marcus Brinkmann, who discovered the SigSpoof vulnerabilities in June 2018, their existence, and the fact that they were present "in the wild" for so long, throws into question the integrity of past emails, "backups, software updates, ... and source code in version control systems like Git." References1. ^1 2 {{cite web|url=https://www.golem.de/news/sigspoof-signaturen-faelschen-mit-gnupg-1806-134940.html|title=SigSpoof: Signaturen fälschen mit GnuPG|website=Golem.de|last=Böck|first=Hanno|date=2018-06-13|accessdate=2018-10-08}} [1][2][3][4]2. ^1 2 {{cite web|url=https://www.heise.de/security/meldung/Enigmail-und-GPG-Suite-Neue-Mail-Plugin-Versionen-schliessen-GnuPG-Luecke-4078685.html|title=Enigmail und GPG Suite: Neue Mail-Plugin-Versionen schließen GnuPG-Lücke|last=von Westernhagen|first=Olivia|website=Heise Security|accessdate=2018-10-08}} 3. ^1 2 3 {{cite web|url=https://www.theregister.co.uk/2018/06/19/gnupg_popped_again_in_pass/|title=Pass gets a fail: Simple Password Store suffers GnuPG spoofing bug|website=The Register|last=Chirgwin|first=Richard|date=2018-06-19|accessdate=2018-10-08}} 4. ^1 2 {{cite web|url=https://derstandard.at/2000081781101/20-Jahre-alter-Fehler-entdeckt-PGP-Signaturen-liessen-sich-einfach|title=20 Jahre alter Fehler entdeckt: PGP-Signaturen ließen sich einfach fälschen - derStandard.at|website=Der Standard|date=2018-06-18|accessdate=2018-10-08}} }}{{Hacking in the 2010s}}{{computer-security-stub}} 2 : Vulnerability|Computer security exploits |
| 随便看 |
|
开放百科全书收录14589846条英语、德语、日语等多语种百科知识，基本涵盖了大多数领域的百科知识，是一部内容自由、开放的电子版国际百科全书。