49016 / Lexi Groves
security researcher, ctf player, photography nerd. pwns software for fun and profit. previously talked about security shenanigans at nixcon 2024, mrmcd 2025, 39c3 2025
Session
09-12
13:50
30min
The gpg.fail aftermath: On responsible disclosure, GPG, and the state of security in 2026
49016 / Lexi Groves
In 2025, I found and disclosed a bunch of vulnerabilities in GPG, the most used PGP implementation, and held a talk at 39c3 about it. Some of the bugs ended up getting fixed. This talk describes the adventure and aftermath of getting there, shows some novel ones, and talks about the state of security in 2026. May contain zero-days =)
Security
Weltraum - C205