This is Mac OSKIN. A flaw in mail, a surprising lawsuit, and a couple of interesting Apple promotions.

It's Tuesday, the 15th of May 2018.

I'm Ken Ray and this is news from Macawes Ken brought to you by yours truly and

sponsored by Euro. The home Wi-Fi system that goes anywhere and covers everywhere.

Get free overnight shipping in the US and Canada at E-E-R-O-E-O-E-O-O-D-O-D.com with offer code Maco-S can. This show is also supported by people like you

patrons through Patreon. Find out more in that your support at patreon.com slash Maco-Scan

Yay security vulnerabilities hooray!

No, they're not fun, but if there's one thing out there

to which you might be vulnerable, it's better to know than not.

Dubbed E-fail, I download blog says this HTML rendering flaw in email programs including

Apple mail can reveal encrypted emails in plain text under certain

circumstances.

According to the piece, this vulnerability permits an attacker to reveal the plain text

of someone's encrypted emails without needing the sender's private encryption keys, including encrypted emails sent in the past.

In order for the attack to work, a nefarious party must be in possession of your encrypted

S-MIMM or P-G-P emails.

That is a very basic description to the point of being downright vague.

A full write-up was published on Sunday by Computer Security Guy Sebastian Schinsel. How serious is it? Well serious

though a lot of people won't be vulnerable to it apparently. The piece says this bug only affects people who use P.G. G. and S-Mime email

encryption software that makes messages unreadable without an encryption key.

That is not most individuals but it does cover a lot of business

users and accounts. Further, the piece as the attack relies on contacting the same person

...