User Tools

Site Tools


blug-canary-1

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
blug-canary-1 [2020/02/21 02:09]
Xie Tianming old revision restored (2020/01/31 09:14)
blug-canary-1 [2020/03/27 18:41] (current)
BLUG Admin
Line 15: Line 15:
 ==================================== ====================================
  
-Issued for January ​2020.+Issued for March 2020.
  
 Don't just trust the contents of this file blindly! Verify the Don't just trust the contents of this file blindly! Verify the
Line 70: Line 70:
  
 10. We plan to publish the next of these canary statements in the first three 10. We plan to publish the next of these canary statements in the first three
-weeks of March 2020. Special note should be taken if no new canary is published+weeks of April 2020. Special note should be taken if no new canary is published
 by that time or if the list of statements changes without plausible explanation. by that time or if the list of statements changes without plausible explanation.
  
Line 76: Line 76:
 ~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~
  
-1. Since mid-October,​ persmule'​s old signing key 0x2987A25DAC8454A5 has+1. Due to personal reasons, biergaizi (0xFAD3EB05E88E8D6D) was not available 
 +and couldn'​t sign the warrent canary before the end of February, 2020. This 
 +was not a result of any incident. All statements of the warrent canary documents 
 +are still valid. A canary for February, 2020 has been signed by biergaizi 
 +retroactively. 
 + 
 +2. Since mid-October,​ persmule'​s old signing key 0x2987A25DAC8454A5 has
 expired. A new key, 0xEDFFE248ECFACDE3C805906804A40D21DBB89B60,​ has been expired. A new key, 0xEDFFE248ECFACDE3C805906804A40D21DBB89B60,​ has been
 created and uploaded to https://​keys.openpgp.org/,​ it can be obtained from created and uploaded to https://​keys.openpgp.org/,​ it can be obtained from
 this keyserver. this keyserver.
  
-2. The new key will be used by persmule to sign future warrant canary+3. The new key will be used by persmule to sign future warrant canary
 documents. You can verify the signature by crosschecking the other two documents. You can verify the signature by crosschecking the other two
 documents signed by biergaizi and wnereiz for consistency. documents signed by biergaizi and wnereiz for consistency.
  
-3. Due to this key rollover, the October message was not signed by persmule.+4. Due to this key rollover, the October message was not signed by persmule.
 This did/does not indicate a security incident, all of the statements above This did/does not indicate a security incident, all of the statements above
 were valid, and are still valid. were valid, and are still valid.
  
-4. Recent attacks on OpenPGP keyservers have raised great security concerns+5. Recent attacks on OpenPGP keyservers have raised great security concerns
 within the community, as a countermeasure,​ persmule'​s personal User-ID has within the community, as a countermeasure,​ persmule'​s personal User-ID has
 not published to the https://​keys.openpgp.org/​ keyserver. Instead, only not published to the https://​keys.openpgp.org/​ keyserver. Instead, only
Line 97: Line 103:
 for a 3rd-party to verify the canary document signed by persmule. for a 3rd-party to verify the canary document signed by persmule.
  
-5. We are looking for a solution. But for now, we decided that the best+6. We are looking for a solution. But for now, we decided that the best
 option is starting publishing new canary documents using the new key. option is starting publishing new canary documents using the new key.
 As a temporary measure, you can check the canary documents signed by As a temporary measure, you can check the canary documents signed by
Line 104: Line 110:
 by them as valid. by them as valid.
  
-6. This effectively reduced the number of signers to two people. It reduces+7. This effectively reduced the number of signers to two people. It reduces
 the level of confidence, but currently there is no alternative option yet. the level of confidence, but currently there is no alternative option yet.
  
-7. Once the technical problem of OpenPGP public key without User-ID is+8. Once the technical problem of OpenPGP public key without User-ID is
 resolved, you can check the previous signatures retroactively,​ and this resolved, you can check the previous signatures retroactively,​ and this
 would effectively restore the level of confidence. You can archive would effectively restore the level of confidence. You can archive
Line 113: Line 119:
 ensure no data tampering has occured. ensure no data tampering has occured.
  
-8. Unlike persmule, biergaizi and wnereiz'​s signing keys are unchanged,+9. Unlike persmule, biergaizi and wnereiz'​s signing keys are unchanged,
 but the Key-IDs have been changed to its full fingerprint format in the but the Key-IDs have been changed to its full fingerprint format in the
 canary document for clarity. canary document for clarity.
  
-9. When new information is available, it will be published in the "​Special+10. When new information is available, it will be published in the "​Special
 Announcements"​ section in future warrant canary documents. Announcements"​ section in future warrant canary documents.
  
Line 124: Line 130:
  
 $ rsstail -1 -n5 -N -u https://​www.telegraph.co.uk/​news/​rss.xml $ rsstail -1 -n5 -N -u https://​www.telegraph.co.uk/​news/​rss.xml
- The Briefing: Sign up for two-minute audio news updates on WhatsApp, Apple, Spotify and Alexa twice a day + What essential shops are open during ​the coronavirus lockdown? 
- ​Coronavirus infection: everything you need to know about the outbreak from China + What is coronavirus,​ how did it start and how big could it get? 
- Groundhog Day: how the Punxsutawney Phil prediction at Gobbler'​s Knob forecasts the weather + ​Friday ​evening ​news briefing: ​Boris Johnson has coronavirus ​what now? 
- ​Friday ​morning ​news briefing: ​Brexit Day 'dawn of new era' + How does coronavirus home test kit work, and how do I get one? 
- Coronavirus declared a global emergency: in pictures+ How can I join the NHS coronavirus volunteer army, and what would I do?
  
 $ rsstail -1 -n5 -N -u https://​rss.nytimes.com/​services/​xml/​rss/​nyt/​World.xml $ rsstail -1 -n5 -N -u https://​rss.nytimes.com/​services/​xml/​rss/​nyt/​World.xml
- ​Coronavirus Live Updates: ​U.S. Issues Red Alert After Week of Skyrocketing Infections + ​Coronavirus Live Updates: ​House Passes $2 Trillion Relief Bill 
- Britains Brexit Shrug: Just Get On With It + For France, Coronavirus Tests a Vaunted Health Care System 
- Battered at the PollsPro-Europe Britons Gird for the Next Fight + The Virus Is Coming to Myanmarbut the Pain Has Already Begun 
- More Violence. Fewer Prisoners. Inside Mexicos Criminal Justice Reform. + Australia Says Goodbye to the Worlds Longest Boom 
- As Coronavirus Spreads, So Does Anti-Chinese Sentiment+ Migrant Farmworkers Whose Harvests Feed Europe Are Blocked at Borders
  
 $ date -R -u $ date -R -u
-Fri, 31 Jan 2020 09:13:13 +0000+Fri, 27 Mar 2020 18:29:16 +0000
  
 -----BEGIN PGP SIGNATURE----- -----BEGIN PGP SIGNATURE-----
-Version: GnuPG v2 
  
-iQIzBAEBCgAdFiEEJVIRsjlaWj4OSKDx+tPrBeiOjW0FAl4z77MACgkQ+tPrBeiO +iQIzBAEBCgAdFiEEJVIRsjlaWj4OSKDx+tPrBeiOjW0FAl5+R7kACgkQ+tPrBeiO 
-jW2QVg/+IqkB65Pz4DFLsOKkSvNIv/prByL/​SEhDe5SVNH1Z32yTrLkvQTU27rZx +jW2IiA//arXTG8Y1ZdlLjIaydHuDurcdIfskEgwDwH1almMDeJIgk0ybl+gR/TZ7 
-RMDFFtbq/QSv7psi90sc4PmHruFkAecrg7+BdkmF5v9ytban62GuP8R0JAvicyw1 +utZ3UNsHxCsB/xs6p5Gw26IilAGBgBqodrm1OwUflCpMS7KfVTP4It1dfbXBX/​gP 
-b+lCu6QW2oOtzDdqibLYh7x6V24ffd2Ts0JpLCbYFyER3iS4i+ktHAD6sZTMQ0F3 +RARTmX07Qa+g+UtZlrRwXvAIk/SPG725SSH5uhVjp+XtPXU/9/pJLnicu47CEKlg 
-J2vlftonL2CyddeiqBlsZ/xKiHuMFRt22qUythpp3j5E86VmaPddKcZKiaqaJZ5K +tbiEgGOzbj+nbAoNOvCD8KA7NGAT8togJgru/​KrNNpfpMR7N5WmypEQA79XGF/Hx 
-Fm7QswORB5B9xzSliaVj5yi3lCwwcievaacKwWJ04fm4WUhvzG4a2eTCUZWFYMuZ +J5KwwwQtW38ACLy/Tbop9QUDvVDAneFEWjcEpuMy7uEBdmfI0WmpTRynjWAkqJmD 
-0+o0/​tEwAoglO6FIgC0sTk9J5DIOOM0/tp/hsLrQlPspaK65xeJv/​HE0XJPO5l3s +mHXJUaIT3LkXjbn9xFhAdRtwlOMrnt8Nkr6AKIe+ERn4J8yI1dK3q2n2S+0ogvmU 
-0gjmijxFo5iLXDGq59xhs0+hxgH0RwwADbebHku/l2a46Sjq4jp0SrQMm5n7NQ5r +vQ00fTjNfce324sky4/sYAFyqHpwxDHd/​Yx1kYkxLAW299L0Rt+xlrWqiwIWJQJ
-4GdmazDt5cUhm6jjTDEYflc0MADvCfdKHNHAhsJaE/5+jeQKv6V/​EVbCEgrnxv10 +6m5k/02A55aIrmpVYCY9byrGjOSwJmaJM8QuI4gDwRdxGOsHsEsGgar1Tb8FUbph 
-NZhR4ihkqdSPMO30sGvH4dEEhAi/fEVDPlQvA49jG+qmUxI9H875my99KEa/W8jY +WuXVNjXM69yV0YUW2S2twVDRA7XKoozmMR2EC6TaT1pF5kJ8YB5+QRcr82z8CMDF 
-2w8/QjJBkkaeZBQXnFl8g1EHRoMeCLC2aePTWcM9Kd6y09rhX3g1+w32OI+I+vCH +puqkABkwhLbAFPnCx44KKpnpQWh+xB/​vnFobSiT1tFGTUuwVO7DyarR/​WhMjxuTG 
-xK73HZQDgVnxpJlZPpWgn837wu284opkMkib+1RhsvFx3mCbrqw+nTefGOsjjSqALbnq2I0Zfn4H8UmhQYZTuPm2khpXjQXSY3lUPR0
-=5Vba+=NgPa
 -----END PGP SIGNATURE----- -----END PGP SIGNATURE-----
 </​code>​ </​code>​
blug-canary-1.1582250971.txt.gz · Last modified: 2020/02/21 02:09 by Xie Tianming