This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
blug-canary-2 [2023/07/19 10:38] persmule |
blug-canary-2 [2025/03/26 11:44] (current) persmule |
||
---|---|---|---|
Line 6: | Line 6: | ||
==================================== | ==================================== | ||
- | Issued for July 2023. | + | Issued for March 2025. |
Don't just trust the contents of this file blindly! Verify the | Don't just trust the contents of this file blindly! Verify the | ||
Line 15: | Line 15: | ||
* biergaizi: 0x255211B2395A5A3E0E48A0F1FAD3EB05E88E8D6D | * biergaizi: 0x255211B2395A5A3E0E48A0F1FAD3EB05E88E8D6D | ||
- | * persmule : 0xEDFFE248ECFACDE3C805906804A40D21DBB89B60 | + | * persmule : 0x7636112A33805777A0646B1BFA7C50B699AC61D2 |
* vimacs | * vimacs | ||
Line 61: | Line 61: | ||
10. We plan to publish the next of these canary statements in the first three | 10. We plan to publish the next of these canary statements in the first three | ||
- | weeks of August 2023. Special note should be taken if no new canary is published | + | weeks of April 2025. Special note should be taken if no new canary is published |
by that time or if the list of statements changes without plausible explanation. | by that time or if the list of statements changes without plausible explanation. | ||
Line 71: | Line 71: | ||
~~~~~~~~~~~~~~~~~~~~~~~~ | ~~~~~~~~~~~~~~~~~~~~~~~~ | ||
- | 1. We've found a workaround for importing keys on https:// | + | None. |
- | without User-ID. The instructions for verifying persmule' | + | |
- | been added. | + | |
Canary Verification Procedures | Canary Verification Procedures | ||
Line 96: | Line 94: | ||
b. Obtain the dummy public key from any traditional OpenPGP Keyserver, | b. Obtain the dummy public key from any traditional OpenPGP Keyserver, | ||
such as https:// | such as https:// | ||
- | fingerprint is 0xEDFFE248ECFACDE3C805906804A40D21DBB89B60. Note that, to | + | fingerprint is 0x7636112A33805777A0646B1BFA7C50B699AC61D2. Note that, to |
import this key, one must copy and paste the key in ASCII from the Keyserver | import this key, one must copy and paste the key in ASCII from the Keyserver | ||
website to a file or console and use the command "gpg --import" | website to a file or console and use the command "gpg --import" | ||
Line 104: | Line 102: | ||
c. This is a special dummy public key with its User-IDs and subkeys stripped | c. This is a special dummy public key with its User-IDs and subkeys stripped | ||
that we specifically created, leaving only a " | that we specifically created, leaving only a " | ||
- | E-mail address, "glahamm | + | E-mail address, "Kikek <othar7ok@ep2quey.invalid>" |
allowing the subsequent import of additional subkeys. | allowing the subsequent import of additional subkeys. | ||
Line 113: | Line 111: | ||
e. Use the latest GnuPG in most operating system, the signatures made by | e. Use the latest GnuPG in most operating system, the signatures made by | ||
- | persmule' | + | persmule' |
- | other systems should work just fine, but not Fedora. The subkeys contains | + | |
- | signatures made with Brainpool curves, which are disabled on Fedora due to | + | |
- | potential patent-licensing problems, causing a " | + | |
- | error. | + | |
3. To verify vimacs' | 3. To verify vimacs' | ||
Line 131: | Line 125: | ||
$ rsstail -1 -n5 -N -u https:// | $ rsstail -1 -n5 -N -u https:// | ||
- | Coutts' | + | Heathrow accused of colossal failure over fire shutdown |
- | Dan Wootton admits errors | + | Heathrow forced to shut down because |
- | Met agree payout | + | Woman jailed for tricking partner into thinking she was pregnant |
- | Ryan Giggss friends say he is determined to get his life and career back | + | Ukraine: The Latest - the worlds most trusted |
- | Dame Alison Rose: the bank boss who steered Coutts diversity drive | + | Listen: The tech boss who was Russias secret spy |
$ rsstail -1 -n5 -N -u https:// | $ rsstail -1 -n5 -N -u https:// | ||
- | Extreme Heat Grips 3 Continents as Climate Change Warms Earth | + | Europe Talks Tough on Military Spending, but Unity Is Fracturing |
- | | + | |
- | Thai PM Vote: Move Forward Coalition With Pheu Thai at Risk | + | Why These Islanders Hunt Dolphins |
- | Kissinger Meets Top Officials in China and Gets a Warm Greeting | + | A Fire Plunged Heathrow Into Darkness. A Nearby Data Center Kept Humming. Why? |
- | North Korea Detains U.S. Soldier After Unauthorized Border Crossing | + | What to Know About the Only US Military Base in Greenland |
$ date -R -u | $ date -R -u | ||
- | Wed, 19 Jul 2023 10:35:05 +0000 | + | Wed, 26 Mar 2025 11:42:35 +0000 |
-----BEGIN PGP SIGNATURE----- | -----BEGIN PGP SIGNATURE----- | ||
- | iQEzBAEBCgAdFiEEqcx8a+Ec/pj23gbbkYawQe49rFoFAmS3vGEACgkQkYawQe49 | + | iQIzBAEBCgAdFiEE6NbA/ |
- | rFpJRgf/aqOdexteJ8/Jm3OkhIDVYc+6bnX/DuNdwXNJmra8RA5yYuIndHey5ZUA | + | tyRY2w// |
- | ZJwN2qmBIB7e+yxQS+8jUWjE5zMySMALlAm6kGj+8MOEYzOCHfvtbH4IQHt9I+2L | + | RxwCLUlD4DFGHYa+n8/aj3w1ccrcE5uIWcbC5xwIbEp7XhZypKgTBOAaV6/ds87A |
- | Vu1943W8HX/cvPMStUJhA+BzGDunoxSJMNgW/BDBvBijbG2YGAadfzC3HsLyWIU3 | + | bJiCTbn2xfMrY2ph3+Id1/1gWYlYOGXO83jIYKaYJ6DEmM4kPIK3fA4NoU+u16Ha |
- | 32z9KFLX+YSBGx5wkje8RpVf9NKaXjjuiYgfEyEKVIBVDld2FdLBOM2rBiuyysEl | + | PXtyuVPaSsFmrSzyhkpTeU0N32u2yZAJcV+lYCAvj7ksW0ADo9Diu/ |
- | vZ/x0Izsd84OfUMsGtl5JqRgrWMdtVHgf4fMtE8Fhb8rmZZ0NDw/epljn1RGKXSR | + | LaBBhZPIT4X7uhFaIv56iSRa/ |
- | Kq2gdwd2TuCTruw28TKSOyf6zZzdWA== | + | MKxba3lVCZ/ |
- | =V47r | + | QWntWVDbu/Im6IvKoyau/ |
+ | AMCAPNlFv+PulSeq13atvu+UR6vcvIbCEVk1U8ILjV3vswIpVRKk/ | ||
+ | X+ABZRmvBQQDeleO+sKhpYQoxtXbZuWFBy/DoNE+IOZN/SbQ5PZg+gGYQzIk5OGR | ||
+ | uiWWdUq6JlIUWNNLBadV0CW9+bL8OstwUn4UbZXsyyqhwhJHpo2jSdLz5wlhzFCz | ||
+ | 42GTXtGNvNf1xnp/ | ||
+ | =P59D | ||
-----END PGP SIGNATURE----- | -----END PGP SIGNATURE----- | ||
</ | </ |