Differences

This shows you the differences between two versions of the page.

--- blug-canary-2 [2019/09/30 17:44]
BLUG Admin old revision restored (2019/09/20 01:52)
+++ blug-canary-2 [2026/03/27 06:52] (current)
persmule
@@ Line 1: / Line 1: @@
-====== Beijing GNU/Linux User Group Canary (2/3) ======
 <code>
 -----BEGIN PGP SIGNED MESSAGE-----
@@ Line 8: / Line 6: @@
 ====================================
-Issued for September 2019.
+Issued for March 2026.
 Don't just trust the contents of this file blindly! Verify the
@@ Line 16: / Line 14: @@
 ~~~~~~~~~~~~~
-* biergaizi: 0xFAD3EB05E88E8D6D
+* biergaizi: 0x255211B2395A5A3E0E48A0F1FAD3EB05E88E8D6D
-* persmule : 0x2987A25DAC8454A5
+* persmule : 0x7636112A33805777A0646B1BFA7C50B699AC61D2
-* wnereiz  : 0xFDFF2E13AA25BE72
+* vimacs   : 0x7079B481F04B5D8B65A0ECDEEA2DB82FE04A9403
 THREE DOCUMENTS IN TOTAL.
@@ Line 55: / Line 53: @@
 . Our personal safety and security is not threatened.
-. To avoid security breaches and emphasize the clarity of the warrent canary
+. To avoid security breaches and emphasize the clarity of the warrant canary
 documents, if a signer is temporarily unavailable, only existing signers in the
 "Signer" list SHALL sign a special placeholder notice (this notice itself SHOULD
 NOT be considered a valid canary document) until the signer becomes available
-again and signs the missed documents. A new signer SHOULD NOT sign a warrent
+again and signs the missed documents. A new signer SHOULD NOT sign a warrant
 canary document only due to the temporary unavailability of a existing signer.
 . We plan to publish the next of these canary statements in the first three
-weeks of October 2019. Special note should be taken if no new canary is published
+weeks of April 2026. Special note should be taken if no new canary is published
 by that time or if the list of statements changes without plausible explanation.
+. Due to the ongoing security issues of OpenPGP keyservers, it makes signature
+verification an issue and somewhat a challenge. For completeness, complete
+procedures for canary verification is included here.
 Special Announcements
@@ Line 70: / Line 72: @@
 None.
+Canary Verification Procedures
+~~~~~~~~~~~~~~~~~~~~~~~~
+. To verify biergaizi's signature...
+    a. Obtain the public key from any traditional OpenPGP Keyserver, such as
+    https://keyserver.ubuntu.com, and import the public key. The fingerprint
+    is 0x255211B2395A5A3E0E48A0F1FAD3EB05E88E8D6D.
+    b. Use the latest GnuPG in any operating system.
+. To verify persmule's signature...
+    a. Due to the previous attacks on OpenPGP keyservers, persmule has published
+    the OpenPGP public key to https://keys.openpgp.org without a User-ID. Using
+    the standard method, it's impossible to import a OpenPGP public key without
+    User-ID. But since April 2013, we have developed a workaround, described
+    below.
+    b. Obtain the dummy public key from any traditional OpenPGP Keyserver,
+    such as https://keyserver.ubuntu.com, and import the public key. The
+    fingerprint is 0x7636112A33805777A0646B1BFA7C50B699AC61D2. Note that, to
+    import this key, one must copy and paste the key in ASCII from the Keyserver
+    website to a file or console and use the command "gpg --import". Due to a
+    technical problem, Using "gpg --recv-key" or "gpg --search-keys" does not
+    work.
+    c. This is a special dummy public key with its User-IDs and subkeys stripped
+    that we specifically created, leaving only a "stub" User-ID (with an invalid
+    E-mail address, "Kikek <othar7ok@ep2quey.invalid>"). Its sole purpose is
+    allowing the subsequent import of additional subkeys.
+    d. Next, with the stub key already imported, obtain the public key from
+    https://keys.openpgp.org using the same fingerprint, and import this key.
+    Because the dummy key with its stub User-ID is already in presence, it's
+    now possible to import the https://keys.openpgp.org public key directly.
+    e. Use the latest GnuPG in most operating system, the signatures made by
+    persmule's key can now be verified as usual.
+. To verify vimacs' signature...
+    a. Obtain the public key from any traditional OpenPGP Keyserver, such as
+    https://keyserver.ubuntu.com, and import the public key. The fingerprint
+    is 0x7079B481F04B5D8B65A0ECDEEA2DB82FE04A9403.
+    b. Use the latest GnuPG in any operating system.
 Proof of Freshness
@@ Line 75: / Line 125: @@
 $ rsstail -1 -n5 -N -u https://www.telegraph.co.uk/news/rss.xml
- Almost 100,000 children are leaving school without five good GCSEs, Children's commissioner reveals
+ Counter-terror police investigating Iran-backed firebombing
- BBC and father who challenged Prime Minister step in to defend Laura Kuenssberg
+ Man dead and boy in critical condition after double stabbing in skate park
- Girls school runs stand up comedy classes for pupils so they have courage to ask for pay rises in the future
+ Ministers to announce crackdown on foreign political donations
- Child sex abuse victims "re-traumatised by frustrating, hostile and futile' battle for compensation, inquiry finds
+ Telegraph nominated for 20 press awards
- Premier League footballer fled hotel window in his underpants after being filmed on bed with woman who wasn't his partner, blackmail trial hears
+ Bird-flu, nukes and asteroids: what 2026 might have in store
 $ rsstail -1 -n5 -N -u https://rss.nytimes.com/services/xml/rss/nyt/World.xml
- Attack on Saudi Arabia Tests U.S. Guarantee to Defend Gulf
+ Trump Again Extends Deadline for Iran to Open Strait or Face Strikes on Power Grid
- Brownface, Blackface and About-Face. Is Trudeau Who He Says He Is?
+ Cuban Patients Are Dying Because of U.S. Blockade, Doctors Say
- Syrian Children Saved a German Village. And a Village Saved Itself.
+ The Sudden Death of a Man Who Told Chinese Kids How to Succeed
- Netanyahu and Gantz Agree on Unity, but Not on What It Means
+ Olympic Committee Bars Transgender Athletes From Womens Events
- New Video Surfaces Showing Trudeau in Blackface, Compounding Scandal
+ Hungary Opens Espionage Case Against Journalist
 $ date -R -u
-Fri, 20 Sep 2019 01:47:02 +0000
+Fri, 27 Mar 2026 06:48:37 +0000
 -----BEGIN PGP SIGNATURE-----
-iQIzBAEBCgAdFiEEfpRElbj/BG3RcF+YQmooAO3Wsm0FAl2EMB4ACgkQQmooAO3W
+iQIzBAEBCgAdFiEEwd3eTssv5+79Vu/hOh3wWE1+p6wFAmnGKE8ACgkQOh3wWE1+
-sm1Bkg/+NNLBpjN2wwrpqFVIo0SmJtEdXUhSIXW4rdj1OVfF+EJUXyx2Hfw5H/Gb
+p6yhzBAAwH8geJhyoVwVJYj6v/rKptsy/cQsc72rPs/OyBFaHV/ukr4mHJ/uLrkv
-GDGwAmWPHWiTEIZrdiGKq53dcfReROkpixcS+BboaDSQlhRLmlTg5e0UQqrMz/zk
+NjivPg4A0ByPGGBjcfCaBXWahgNXE+M1Vp5+Cpkc2meOsDVMkdcAslzSxMu476sV
-zCnDe2vE9FamSDc26NKc+nlo4rT1NGuNrD0gD/ULQn/HPnRwZ44xnuxQYFTTqwM
+hQtwg8EUiWg9uaudqwFtmCpF8z6BCjph34CEVK8s/5d6kKcwElx95lrYFGQULzR4
-fNIC+n69NvmkEXSiig3hiQ3n8ZwgLndXuPuUoqD6vQCFjBmtMLbuuxPVWzxJFJd0
+nA+361nDwS6MP+22u55xGVWdmVvvJemuZ8sU6Iu7qcKn3MT3o7AwmGDABVSTlYvz
-eiRP3ZmQyxlR8AdfoCaG3gRWLqM/CfDWm/dTG27qKw661j1VQ5xl/dHfEc/O1ZG3
+yd86iGGV9/EE3u4EHJCmV79zqeSfL8Q4e6maYp2Q4HQD2PqpoH3Ux1ZdYgL8Ok4Q
-Kum7pzaMmgJeTXwkGigBb6QHbj4NioBz/SbMFNdOqyktYu6/akyQ1LUD6pUefVlX
+DEuYVIG/oK8if5hIMQReQRBUKFWPGDyfsLTDpZuOlPKuGKUUHFjZtHVXNofIxeU
-Sz9ZwnBUZbzBdnuFIckblu+7XO47ZtNhgVLaEq8lcDTgHwE26lOgjAZSIZlbJqQz
+Z7f93FLreome2pTCuhGa6lLh1sKC0mYaO0QMkg2WokK/fdMSdxIkMuwI7R2KGM9D
-Rx8zkZvTDpsy7q3bjVs8mYrbuh+8fJuP0Th59xwSrqbLfhRHx7h/UcOEWUzuJedj
+xXVhjxL87174ugaut1qy9HuLKYenuTT/20wWb2ukXcgkKH9LClS57U8ggl/Zg12Y
-fe81M59cf+Qhkm2ywhXuVDqHf3eNsMgcJ0HBb/v20D8ew75edtvWtI9f+/kR/u+
+edOR+JtcU78lRIZMdzN5fgWV4jX5qcjCD9M3G3f1CElNRzDh/LsU1lrcb2Xe2VJB
-qBhKZeVcFVdxWnS70C13bSgjC3eSu1Yt1xJdW21v52cvtCa5TapM7cCKL1I/kb5i
+eNz4GwOuGsT0mpgTaPArAT/TAFxwk5RS+3oM4UIJp9n4GlbLC5tdVZkcnPREnus
-A0oxb7BrzNi8KbvMwhTQUkkejcqciBIuSOtJOu0WYhHQ9Jadbis=
+rDcuSvZSg8gk0DrwO6yFD2DjAWhR12SiLxbISukAd4cvJ1XsH4Q=
-=O4TO
+=SfPl
 -----END PGP SIGNATURE-----
 </code>

BLUG Wiki

User Tools

Site Tools

Differences

Page Tools