From: fhalper@pilot.njin.net (Frederic Halper)
Date: Sat, 2 Jul 94 11:06:23 PDT
To: cypherpunks@toad.com
Subject: MacPGP Bug
Message-ID: <9407021806.AA09728@pilot.njin.net>
MIME-Version: 1.0
Content-Type: text/plain


   I friend of mine has shown me a bug in MacPGP that allows someone to come
along after you have decrypted a message, check "Recycle Passwords" in the 
options menu and proceed to decrypt any encrypted messages you have.  
Even if you didn't have "Recycle passwords" selected before you decrypted the 
message, PGP will recycle the passwords.  I assume it exists in all versions.
Reuben Halper
P.S.  I am going away so I have to unsubscribe from the list for a month or so.
Please send any comments to Reuben8878@aol.com