Review of PGP & GPG Posted

Amazon.com just posted my five star review of PGP & GPG by Michael Lucas, one of the best tech authors around. From the review:

PGP & GPG is another excellent book by Michael Lucas. I thoroughly enjoyed his other books due to their content and style. PGP & GPG continues in this fine tradition. If you are trying to learn how to use PGP or GPG, or at least want to ensure you are using them properly, read PGP & GPG.

Note: Is anyone using GnuPG with a smart card like this one from Kernel Concepts?

Comments

Anonymous said…
I've seen several members of FSF Europe with such a smart card with their GPG key on it, and AFAIK, that's even the FSFE's official "membership card".
1:13 AM
Unknown said…
I bought the book based on your review and I want to thank you. While I consider myself pretty comfortable with OpenPGP I was hoping this book would be something I could give to friends and family and get them on board, which is something I haven't been able to do by myself. This book might be just the thing! At about 15 dollars and short enough that It can be read in a few days I think it covers the concepts nicely although I wish it also discussed how to use PGP/GPG on a mac. Thanks for the review.
6:09 PM
Richard Bejtlich said…
Gekitsuu -- cool. It's a great book.
4:49 PM
Carlos R. said…
Hi Richard, I'm Carlos again, but now with a blog profile.
I bough the book too.. based on your review, the difference from gekitsuu is that I paid more, because I am in another country, but well, Its a good book.
Sorry for the time but I had problems with one of my HP DL580 servers and I'm working in it.
REGARDS
4:21 AM
Post a Comment

Popular posts from this blog

Zeek in Action Videos

Image
This is a quick note to point blog readers to my Zeek in Action YouTube video series for the Zeek network security monitoring project .  Each video addresses a topic that I think might be of interest to people trying to understand their network using Zeek and adjacent tools and approaches, like Suricata, Wireshark, and so on.  I am especially pleased with Video 6 on monitoring wireless networks . It took me several weeks to research material for this video. I had to buy new hardware and experiment with a Linux distro that I had not used before -- Parrot .  Please like and subscribe, and let me know if there is a topic you think might make a good video.
Read more

MITRE ATT&CK Tactics Are Not Tactics

Image
Just what are "tactics"? Introduction MITRE ATT&CK  is a great resource, but something about it has bothered me since I first heard about it several years ago. It's a minor point, but I wanted to document it in case it confuses anyone else. The MITRE ATT&CK Design and Philosophy document from March 2020 says the following: At a high-level, ATT&CK is a behavioral model that consists of the following core components: • Tactics, denoting short-term, tactical adversary goals during an attack; • Techniques, describing the means by which adversaries achieve tactical goals; • Sub-techniques, describing more specific means by which adversaries achieve tactical goals at a lower level than techniques; and • Documented adversary usage of techniques, their procedures, and other metadata. My concern is with MITRE's definition of "tactics" as "short-term, tactical adversary goals during an attack," which is oddly recursive. The key word in the tacti...
Read more

New Book! The Best of TaoSecurity Blog, Volume 4

Image
  I've completed the TaoSecurity Blog book series . The new book is  The Best of TaoSecurity Blog, Volume 4: Beyond the Blog with Articles, Testimony, and Scholarship .  It's available now for Kindle , and I'm working on the print edition.  I'm running a 50% off promo on Volumes 1-3 on Kindle through midnight 20 April. Take advantage before the prices go back up. I described the new title thus: Go beyond TaoSecurity Blog with this new volume from author Richard Bejtlich. In the first three volumes of the series, Mr. Bejtlich selected and republished the very best entries from 18 years of writing and over 18 million blog views, along with commentaries and additional material.  In this title, Mr. Bejtlich collects material that has not been published elsewhere, including articles that are no longer available or are stored in assorted digital or physical archives. Volume 4 offers early white papers that Mr. Bejtlich wrote as a network defender, either for technica...
Read more