AuthorTopic: Security Updates to GPG4USB  (Read 846 times)

Offline Palloy

  • Moderator
  • Sous Chef
  • *****
  • Posts: 3751
    • View Profile
    • https://palloy.wordpress.com
Security Updates to GPG4USB
« on: January 29, 2016, 06:33:49 PM »
A new version of GPG4USB has been released with security updates, version 0.3.3-2 replacing v0.3.3-1 .
It can be downloaded from http://www.gpg4usb.org/download/gpg4usb-0.3.3-2.zip
The folder your old version lives in depends on where you put it.  It may be something like H:\gpg4usb , where H: is your USB stick.
BEFORE you unzip the downloaded file, rename H:\gpg4usb to H:\gpg4usb-0.3.3-1
Then unzip the download into H:\gpg4usb
Start the app and it will offer you the option of importing your keys and configuration options from an earlier gpg4usb.
Point the app to H:\gpg4usb-0.3.3-1 and it will copy everything across.
You can then delete the gpg4usb-0.3.3-1 folder, BUT it is safer to keep it as a backup for a while.

Less important

Unfortunately the app's Help > About window doesn't give the sub-version number, only "0.3.3".  I have recommended to them that it should.
Even more unfortunately it doesn't do all this automatically.

If you run a Linux OS (and you should), the apps gpa and kgpg do almost exactly the same job as gpg4usb, except that the folder is always /home/username/.gnupg , so not on a USB stick, and updates are automatic, when they are released.  You can import keys to them from gpg4usb or vice versa.

Again unfortunately, updates are not released as often as they should be - for security fixes if nothing else. 
For the very latest gpa, including all the latest libraries, you can go to http://gnupg.org, download the sources and build your own copy, but having done this once, I wouldn't recommend this.  It is much too hard if you don't know exactly what you are doing.

This is the problem with Open Source software - it is all done by people in their spare time for free, so you can't expect them to care too much about your situation.  Micro$oft doesn't care either, and they expect to pay for the privilege!

The State is a body of armed men

Offline RE

  • Administrator
  • Chief Cook & Bottlewasher
  • *****
  • Posts: 42050
    • View Profile
Re: Security Updates to GPG4USB
« Reply #1 on: January 29, 2016, 06:47:09 PM »
I downloaded the new version to the new laptop, which I never had the old version on anyhow.  I renamed to v0.3.3-2.

I am also not going to import anything from the old file on my USB stick, not much in there anyhow.  I will also make a new Private-Public Key pair.  I will publish my new Public Key after I have done this.

RE
Save As Many As You Can

Offline Palloy

  • Moderator
  • Sous Chef
  • *****
  • Posts: 3751
    • View Profile
    • https://palloy.wordpress.com
Re: Security Updates to GPG4USB
« Reply #2 on: January 29, 2016, 08:08:40 PM »
You will need your old Private Key if you want to decrypt anything that was sent to you using your old Public Key, including things you sent with a copy to yourself.
The State is a body of armed men

Offline RE

  • Administrator
  • Chief Cook & Bottlewasher
  • *****
  • Posts: 42050
    • View Profile
Re: Security Updates to GPG4USB
« Reply #3 on: January 29, 2016, 08:53:47 PM »
You will need your old Private Key if you want to decrypt anything that was sent to you using your old Public Key, including things you sent with a copy to yourself.

Nothing in there I need to decrypt.

RE
Save As Many As You Can

 

Related Topics

  Subject / Started by Replies Last post
1 Replies
526 Views
Last post September 02, 2016, 05:45:29 PM
by Eddie
1 Replies
529 Views
Last post September 14, 2016, 09:34:19 PM
by Palloy
0 Replies
265 Views
Last post December 14, 2016, 12:21:18 PM
by Palloy