Hacker News | Telegram Webview: hackernewslive/204317 -

Telegram Group & Telegram Channel

Spoofing OpenPGP.js signature verification
Article, Comments

CVE-2025-47934 - Spoofing OpenPGP.js signature verification — Codean Labs

CVE-2025-47934 allows attackers to spoof arbitrary signatures and encrypted emails that appear as valid in OpenPGP.js. The only requirement is access to a single valid signed message from the target author ("Alice"). Since this undermines the core principle…

www.group-telegram.com/us/hackernewslive.com/204317

2.2K viewsJun 10 at 17:59

group-telegram.com/hackernewslive/204317

Create: 2025-06-10
Last Update: 2025-06-15 10:39:47

Spoofing OpenPGP.js signature verification
Article, Comments

BY Hacker News

Share with your friend now:
group-telegram.com/hackernewslive/204317

Open in Telegram

Telegram | DID YOU KNOW?

Date: 2025-06-15|

Such instructions could actually endanger people — citizens receive air strike warnings via smartphone alerts. Unlike Silicon Valley giants such as Facebook and Twitter, which run very public anti-disinformation programs, Brooking said: "Telegram is famously lax or absent in its content moderation policy." In the past, it was noticed that through bulk SMSes, investors were induced to invest in or purchase the stocks of certain listed companies. Individual messages can be fully encrypted. But the user has to turn on that function. It's not automatic, as it is on Signal and WhatsApp. To that end, when files are actively downloading, a new icon now appears in the Search bar that users can tap to view and manage downloads, pause and resume all downloads or just individual items, and select one to increase its priority or view it in a chat.
from us

Telegram Hacker News
FROM American