blug-canary-2
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
|
blug-canary-2 [2019/09/30 17:44] BLUG Admin old revision restored (2019/07/24 03:57) |
blug-canary-2 [2019/11/21 16:06] persmule |
||
|---|---|---|---|
| Line 8: | Line 8: | ||
| ==================================== | ==================================== | ||
| - | Issued for July 2019. | + | Issued for November |
| Don't just trust the contents of this file blindly! Verify the | Don't just trust the contents of this file blindly! Verify the | ||
| Line 16: | Line 16: | ||
| ~~~~~~~~~~~~~ | ~~~~~~~~~~~~~ | ||
| - | * biergaizi: | + | * biergaizi: |
| - | * persmule : 0x2987A25DAC8454A5 | + | * persmule : 0xEDFFE248ECFACDE3C805906804A40D21DBB89B60 |
| - | * wnereiz | + | * wnereiz |
| THREE DOCUMENTS IN TOTAL. | THREE DOCUMENTS IN TOTAL. | ||
| Line 55: | Line 55: | ||
| 8. Our personal safety and security is not threatened. | 8. Our personal safety and security is not threatened. | ||
| - | 9. To avoid security breaches and emphasize the clarity of the warrent | + | 9. To avoid security breaches and emphasize the clarity of the warrant |
| documents, if a signer is temporarily unavailable, | documents, if a signer is temporarily unavailable, | ||
| " | " | ||
| NOT be considered a valid canary document) until the signer becomes available | NOT be considered a valid canary document) until the signer becomes available | ||
| - | again and signs the missed documents. A new signer SHOULD NOT sign a warrent | + | again and signs the missed documents. A new signer SHOULD NOT sign a warrant |
| canary document only due to the temporary unavailability of a existing signer. | canary document only due to the temporary unavailability of a existing signer. | ||
| 10. We plan to publish the next of these canary statements in the first three | 10. We plan to publish the next of these canary statements in the first three | ||
| - | weeks of August | + | weeks of December |
| by that time or if the list of statements changes without plausible explanation. | by that time or if the list of statements changes without plausible explanation. | ||
| Line 69: | Line 69: | ||
| ~~~~~~~~~~~~~~~~~~~~~~~~ | ~~~~~~~~~~~~~~~~~~~~~~~~ | ||
| - | 1. Due to personal reasons, wnereiz (0xFDFF2E13AA25BE72) was not available | + | 1. Since mid-October, persmule' |
| - | couldn' | + | expired. A new key, 0xEDFFE248ECFACDE3C805906804A40D21DBB89B60, |
| + | created | ||
| + | this keyserver. | ||
| - | 2. We determined that this was not a result of any incident. All statements of | + | 2. The new key will be used by persmule |
| - | the warrent canary documents are still valid. Furthermore, | + | documents. You can verify |
| - | to sign the canary documents | + | documents signed by biergaizi and wnereiz for consistency. |
| - | 3. We determined that the decision of asking vimacs (0xEA2DB82FE04A9403) to | + | 3. Due to this key rollover, |
| - | replace wnereiz and sign a substitution | + | This did/does not indicate |
| - | decision is thus revoked. | + | were valid, and are still valid. |
| - | 4. To avoid future incidents, we have amended | + | 4. Recent attacks on OpenPGP keyservers |
| - | canary documents, and added a new Statement | + | within |
| + | not published to the https:// | ||
| + | cryptographic information can be obtained from the keyserver, without any | ||
| + | User-ID. Currently, it's impossible to import | ||
| + | User-ID | ||
| + | for a 3rd-party to verify the canary document signed by persmule. | ||
| - | 5. The previous warrent | + | 5. We are looking for a solution. But for now, we decided that the best |
| - | this version | + | option is starting publishing new canary documents |
| + | As a temporary measure, you can check the canary documents signed by | ||
| + | biergaizi and wnereiz to decide the validity of the Statements. By signing | ||
| + | their own copies, it indicates that the new key has been verified privately | ||
| + | by them as valid. | ||
| + | |||
| + | 6. This effectively reduced the number of signers to two people. It reduces | ||
| + | the level of confidence, but currently there is no alternative option yet. | ||
| + | |||
| + | 7. Once the technical problem of OpenPGP public key without User-ID is | ||
| + | resolved, you can check the previous signatures retroactively, | ||
| + | would effectively restore the level of confidence. You can archive | ||
| + | persmule' | ||
| + | ensure no data tampering has occured. | ||
| + | |||
| + | 8. Unlike persmule, biergaizi and wnereiz' | ||
| + | but the Key-IDs have been changed to its full fingerprint format in the | ||
| + | canary document for clarity. | ||
| + | |||
| + | 9. When new information | ||
| + | Announcements" | ||
| Proof of Freshness | Proof of Freshness | ||
| Line 90: | Line 117: | ||
| $ rsstail -1 -n5 -N -u https:// | $ rsstail -1 -n5 -N -u https:// | ||
| - | Sri Lanka accuses UK of hiding human remains in 100 containers of exported recycling | + | ' |
| - | | + | Cambridge University students cry fowl over 17th century painting that upsets vegetarians |
| - | | + | |
| - | Give heatwaves names so people take them more seriously, say experts, as Britain braces for hottest day | + | |
| - | Swimmer goes missing after jumping into east London dock with friends | + | Killer of Helen McCourt to be released despite refusing to reveal location of her body |
| $ rsstail -1 -n5 -N -u https:// | $ rsstail -1 -n5 -N -u https:// | ||
| - | For Boris Johnson, the Tumult Begins Inside Downing Street | + | At Odds With Labour, Britains Jews Are Feeling Politically Homeless |
| - | Boris Johnson to Take Leadership | + | Prince Andrews Friendship With Epstein Joins a List of Royal Scandals |
| - | Trump and Johnson: Allies in Disruption | + | |
| - | In Pakistan, a Feminist Hero Is Under Fire and on the Run | + | Arab Thinkers Call to Abandon Boycotts |
| - | South Korean Jets Fire Warning Shots Toward Russian Military Plane | + | Rodrigo Duterte Calls for Ban on Public Vaping in the Philippines |
| $ date -R -u | $ date -R -u | ||
| - | Wed, 24 Jul 2019 03:53:59 +0000 | + | Thu, 21 Nov 2019 16:03:28 +0000 |
| -----BEGIN PGP SIGNATURE----- | -----BEGIN PGP SIGNATURE----- | ||
| - | iQIzBAEBCgAdFiEEfpRElbj/ | + | iQEzBAEBCgAdFiEEwonfPqgFyacM7J3iwYAPuUJ74CEFAl3WtYsACgkQwYAPuUJ7 |
| - | sm3wUhAAvIgywMOmEkiqyHsYx7f2asOPKEFzUKzaLHHlp8cxRSgfeG4bu3QiXSK8 | + | 4CFi3ggA3x0ZIMF9pLOSagf+9JVbk7zTAzUK3BMKZTGR8CZ/TebkaSX72/SSLGEQ |
| - | /wnIYxr8AosmQMJuLo3W3hirC/U7DQtAPxmk8AHU09x+IW1nmoUw1xW8ATKH7xkw | + | g9KNf7ZxhdjKXUlU93Ori6C90yfLfGQ/mOGNjj/pcWx/s3kR9q6r/fLjG3D2UpAF |
| - | ULNLMoMShLoWNkDZxMVtcpG3+1/akAbSqUxkntSESM736kl4Tm6JH/s9E5LQxHVw | + | izX1t76YSBoAoDQ2PJbRNmpZpsGTz51CLIgEdkH+javtqqcIfhJUF+71XKdU8BNv |
| - | Q5hJP5PPwCEpPXUharjnptudxcSVa64MDKJfGW+Pv99lKRCN/vt6oTYiMUSbxy5/ | + | IEtHvO9j0pD3m9mbiXW768B+R8LEQc6UKrxUc7u8aX/rXSRjcHg+F5iK8ED91fSy |
| - | T6sfW2qYCyRDXFvVuEIHOT/ | + | 7zs2ls4VYs2m2S8slyMm8YlKWiFZUEcVGwCvhyqNTlTvg9MVIh8ol4yFuAZ+PTfK |
| - | LlNxbNvssD0qozv2TpTr2xhJo// | + | tXPOvb75y1ghdqYAE7xROoMvc2jQqA== |
| - | jY7c2yJmlWUehqymVZSFn9D997o0VyymeZQmFbg4Zqdvm2uJxfhB6xj3GslYsvHl | + | =yM0h |
| - | C0M9V7bTqTrqgH/ | + | |
| - | LZFvgglXMiwDE/ | + | |
| - | HXmDQwYKgnSNqIa7fpWvw2Shi5Qrnch1G8o3YvVCqYxUVAO6BLuGgiGO2PLaxiWE | + | |
| - | 0HeNR1fnvlwllujTj21iAJZI/ | + | |
| - | =nNSR | + | |
| -----END PGP SIGNATURE----- | -----END PGP SIGNATURE----- | ||
| </ | </ | ||
blug-canary-2.txt · Last modified: 2024/03/31 15:06 by persmule
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
