This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
blug-canary-3 [2024/03/25 01:13] vimacs |
blug-canary-3 [2025/04/27 10:28] (current) vimacs |
||
---|---|---|---|
Line 7: | Line 7: | ||
==================================== | ==================================== | ||
- | Issued for March 2024. | + | Issued for April 2025. |
Don't just trust the contents of this file blindly! Verify the | Don't just trust the contents of this file blindly! Verify the | ||
Line 16: | Line 16: | ||
* biergaizi: 0x255211B2395A5A3E0E48A0F1FAD3EB05E88E8D6D | * biergaizi: 0x255211B2395A5A3E0E48A0F1FAD3EB05E88E8D6D | ||
- | * persmule : 0xEDFFE248ECFACDE3C805906804A40D21DBB89B60 | + | * persmule : 0x7636112A33805777A0646B1BFA7C50B699AC61D2 |
* vimacs | * vimacs | ||
Line 62: | Line 62: | ||
10. We plan to publish the next of these canary statements in the first three | 10. We plan to publish the next of these canary statements in the first three | ||
- | weeks of April 2024. Special note should be taken if no new canary is published | + | weeks of May 2025. Special note should be taken if no new canary is published |
by that time or if the list of statements changes without plausible explanation. | by that time or if the list of statements changes without plausible explanation. | ||
Line 72: | Line 72: | ||
~~~~~~~~~~~~~~~~~~~~~~~~ | ~~~~~~~~~~~~~~~~~~~~~~~~ | ||
- | 1. We've found a workaround for importing keys on https:// | + | None. |
- | without User-ID. The instructions for verifying persmule' | + | |
- | been added. | + | |
Canary Verification Procedures | Canary Verification Procedures | ||
Line 97: | Line 95: | ||
b. Obtain the dummy public key from any traditional OpenPGP Keyserver, | b. Obtain the dummy public key from any traditional OpenPGP Keyserver, | ||
such as https:// | such as https:// | ||
- | fingerprint is 0xEDFFE248ECFACDE3C805906804A40D21DBB89B60. Note that, to | + | fingerprint is 0x7636112A33805777A0646B1BFA7C50B699AC61D2. Note that, to |
import this key, one must copy and paste the key in ASCII from the Keyserver | import this key, one must copy and paste the key in ASCII from the Keyserver | ||
website to a file or console and use the command "gpg --import" | website to a file or console and use the command "gpg --import" | ||
Line 105: | Line 103: | ||
c. This is a special dummy public key with its User-IDs and subkeys stripped | c. This is a special dummy public key with its User-IDs and subkeys stripped | ||
that we specifically created, leaving only a " | that we specifically created, leaving only a " | ||
- | E-mail address, "glahamm | + | E-mail address, "Kikek <othar7ok@ep2quey.invalid>" |
allowing the subsequent import of additional subkeys. | allowing the subsequent import of additional subkeys. | ||
Line 114: | Line 112: | ||
e. Use the latest GnuPG in most operating system, the signatures made by | e. Use the latest GnuPG in most operating system, the signatures made by | ||
- | persmule' | + | persmule' |
- | other systems should work just fine, but not Fedora. The subkeys contains | + | |
- | signatures made with Brainpool curves, which are disabled on Fedora due to | + | |
- | potential patent-licensing problems, causing a " | + | |
- | error. | + | |
3. To verify vimacs' | 3. To verify vimacs' | ||
Line 132: | Line 126: | ||
$ rsstail -1 -n5 -N -u https:// | $ rsstail -1 -n5 -N -u https:// | ||
- | Thursday evening news briefing: Waspi scandal compensation branded a betrayal | + | Man killed in Nottinghamshire gas explosion |
- | Wednesday evening news briefing: Leo Varadkar resigns as Irish prime minister | + | Heathrow accused of colossal failure over fire shutdown |
- | Tuesday evening news briefing: HMRC to close phone lines for six months every year | + | Heathrow forced |
- | Monday evening news briefing: March towards | + | Woman jailed |
- | When is the US election? Everything you need to know about the 2024 race | + | Ukraine: The Latest - the worlds most trusted and award-winning podcast on the war |
$ rsstail -1 -n5 -N -u https:// | $ rsstail -1 -n5 -N -u https:// | ||
- | In Gaza, Witnesses Describe Fear and Deprivation at Besieged Al-Shifa Hospital | + | |
- | Sugar in India, | + | Car Plows Into Vancouver Street Fair, Killing People |
- | Pope Francis | + | Cardinals Are Maneuvering Before Conclave To Elect Francis |
- | Russians Mourn People Killed in Terrorist Concert Hall Attack | + | Why Australia Wants to Set Caps on International Students |
- | Brazil Police Arrest 3 for Murder of Marielle Franco | + | Europes Pharma Industry Braces |
$ date -R -u | $ date -R -u | ||
- | Mon, 25 Mar 2024 01:12:08 +0000 | + | Sun, 27 Apr 2025 10:27:16 +0000 |
-----BEGIN PGP SIGNATURE----- | -----BEGIN PGP SIGNATURE----- | ||
- | iHUEARYKAB0WIQRlsdhNDMVQSujfnGCovW2B2flWVAUCZgDPewAKCRCovW2B2flW | + | iHUEARYKAB0WIQRlsdhNDMVQSujfnGCovW2B2flWVAUCaA4GnAAKCRCovW2B2flW |
- | VI0BAPwOMweYFrk+Yg1fRzM5HHIvd4hblLde4V/RgzgaM9HNCgD+IFQRP96uBbxd | + | VL59AP4qbT9n1fzvKArfNbXL/c1YSDiCHEVOfOm+8ee8fCckSQEAyAn4dsqf3ij0 |
- | eC3hXeDOgAqt754vJTYyupOwcycaOQM= | + | YL5wF1W3UGtfY9jHmNuEwv2VsyEtLwQ= |
- | =sCfB | + | =AV9I |
-----END PGP SIGNATURE----- | -----END PGP SIGNATURE----- | ||
</ | </ | ||