Decades-old PGP bug allowed hackers to spoof just about anyone’s signature
arstechnica.com