This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
blug-canary-3 [2024/06/24 06:51] vimacs |
blug-canary-3 [2025/11/24 10:29] (current) vimacs |
||
|---|---|---|---|
| Line 7: | Line 7: | ||
| ==================================== | ==================================== | ||
| - | Issued for June 2024. | + | Issued for November 2025. |
| Don't just trust the contents of this file blindly! Verify the | Don't just trust the contents of this file blindly! Verify the | ||
| Line 16: | Line 16: | ||
| * biergaizi: 0x255211B2395A5A3E0E48A0F1FAD3EB05E88E8D6D | * biergaizi: 0x255211B2395A5A3E0E48A0F1FAD3EB05E88E8D6D | ||
| - | * persmule : 0xEDFFE248ECFACDE3C805906804A40D21DBB89B60 | + | * persmule : 0x7636112A33805777A0646B1BFA7C50B699AC61D2 |
| * vimacs | * vimacs | ||
| Line 62: | Line 62: | ||
| 10. We plan to publish the next of these canary statements in the first three | 10. We plan to publish the next of these canary statements in the first three | ||
| - | weeks of July 2024. Special note should be taken if no new canary is published | + | weeks of December 2025. Special note should be taken if no new canary is published |
| by that time or if the list of statements changes without plausible explanation. | by that time or if the list of statements changes without plausible explanation. | ||
| Line 72: | Line 72: | ||
| ~~~~~~~~~~~~~~~~~~~~~~~~ | ~~~~~~~~~~~~~~~~~~~~~~~~ | ||
| - | 1. We've found a workaround for importing keys on https:// | + | None. |
| - | without User-ID. The instructions for verifying persmule' | + | |
| - | been added. | + | |
| Canary Verification Procedures | Canary Verification Procedures | ||
| Line 97: | Line 95: | ||
| b. Obtain the dummy public key from any traditional OpenPGP Keyserver, | b. Obtain the dummy public key from any traditional OpenPGP Keyserver, | ||
| such as https:// | such as https:// | ||
| - | fingerprint is 0xEDFFE248ECFACDE3C805906804A40D21DBB89B60. Note that, to | + | fingerprint is 0x7636112A33805777A0646B1BFA7C50B699AC61D2. Note that, to |
| import this key, one must copy and paste the key in ASCII from the Keyserver | import this key, one must copy and paste the key in ASCII from the Keyserver | ||
| website to a file or console and use the command "gpg --import" | website to a file or console and use the command "gpg --import" | ||
| Line 105: | Line 103: | ||
| c. This is a special dummy public key with its User-IDs and subkeys stripped | c. This is a special dummy public key with its User-IDs and subkeys stripped | ||
| that we specifically created, leaving only a " | that we specifically created, leaving only a " | ||
| - | E-mail address, "glahamm | + | E-mail address, "Kikek <othar7ok@ep2quey.invalid>" |
| allowing the subsequent import of additional subkeys. | allowing the subsequent import of additional subkeys. | ||
| Line 114: | Line 112: | ||
| e. Use the latest GnuPG in most operating system, the signatures made by | e. Use the latest GnuPG in most operating system, the signatures made by | ||
| - | persmule' | + | persmule' |
| - | other systems should work just fine, but not Fedora. The subkeys contains | + | |
| - | signatures made with Brainpool curves, which are disabled on Fedora due to | + | |
| - | potential patent-licensing problems, causing a " | + | |
| - | error. | + | |
| 3. To verify vimacs' | 3. To verify vimacs' | ||
| Line 132: | Line 126: | ||
| $ rsstail -1 -n5 -N -u https:// | $ rsstail -1 -n5 -N -u https:// | ||
| - | Friday evening news briefing: Labour drawing up plans for 10bn extra wealth taxes | + | Strictly star arrested |
| - | | + | Driver who hit grandfather dragged him further into the road then fled |
| - | Summer solstice 2024: Date, time and midsummer traditions to celebrate | + | |
| - | Wednesday evening news briefing: Tory big beasts to lose seats in election bloodbath, poll predicts | + | Teenagers arrested after nursery cyber attack |
| - | | + | |
| $ rsstail -1 -n5 -N -u https:// | $ rsstail -1 -n5 -N -u https:// | ||
| - | Euro 2024 Tournament Runs Smoothly in Germany, but the Trains Do Not | + | Before Berlins Cowboys Are Booted Off Their Land, One Final Hoedown |
| - | Make Millions Before Grandma Dies Brings Tears to Southeast Asia | + | Russian Disinformation Comes to Mexico, Seeking to Rupture US Ties |
| - | Many Israelis Blame Hamas for Gaza Suffering, and Feel Little Sympathy | + | Malaysia to Ban Children Under 16 From Social Media, Echoing Australia |
| - | The Nation Resurgent, and Borders, Too | + | Why a Man With U.S. Ties Fought for Russia in Ukraine |
| - | After Hajj Deaths, Egypt Suspends 16 Companies | + | |
| $ date -R -u | $ date -R -u | ||
| - | Mon, 24 Jun 2024 06:49:49 +0000 | + | Mon, 24 Nov 2025 10:28:17 +0000 |
| -----BEGIN PGP SIGNATURE----- | -----BEGIN PGP SIGNATURE----- | ||
| - | iHUEARYKAB0WIQRlsdhNDMVQSujfnGCovW2B2flWVAUCZnkXKgAKCRCovW2B2flW | + | iHUEARYKAB0WIQRlsdhNDMVQSujfnGCovW2B2flWVAUCaSQzaQAKCRCovW2B2flW |
| - | VB5tAQDRQ+lTJ6ZLKxDK9kjxKouT6il5frVlFSCFDiTK5w0DpwEA289nmt3J+Y3h | + | VGlaAQDZtW5BGsfmHytPj/ |
| - | GyIul13bgeSB1gbQOdgzhLNiqtDndQ8= | + | KVA5gJlKUG5RiOKfXnMyRwbKhciICgI= |
| - | =bcEy | + | =FE7W |
| -----END PGP SIGNATURE----- | -----END PGP SIGNATURE----- | ||
| </ | </ | ||