This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
blug-canary-2 [2020/05/12 03:48] persmule |
blug-canary-2 [2020/06/18 09:06] persmule |
||
---|---|---|---|
Line 8: | Line 8: | ||
==================================== | ==================================== | ||
- | Issued for May 2020. | + | Issued for June 2020. |
Don't just trust the contents of this file blindly! Verify the | Don't just trust the contents of this file blindly! Verify the | ||
Line 63: | Line 63: | ||
10. We plan to publish the next of these canary statements in the first three | 10. We plan to publish the next of these canary statements in the first three | ||
- | weeks of June 2020. Special note should be taken if no new canary is published | + | weeks of July 2020. Special note should be taken if no new canary is published |
by that time or if the list of statements changes without plausible explanation. | by that time or if the list of statements changes without plausible explanation. | ||
Line 71: | Line 71: | ||
1. Due to personal reasons, wnereiz (0xFDFF2E13AA25BE72) voluntarily decided | 1. Due to personal reasons, wnereiz (0xFDFF2E13AA25BE72) voluntarily decided | ||
to quit from the warrant canary team and he is no longer a signer of the | to quit from the warrant canary team and he is no longer a signer of the | ||
- | warrant canary documents since April 15th, 2019. All statements from the | + | warrant canary documents since April 15th, 2020. All statements from the |
warrant canary documents before this date are still valid. This is an official | warrant canary documents before this date are still valid. This is an official | ||
- | desicion | + | decision |
signed by wneriez. | signed by wneriez. | ||
- | 2. A new member, vimacs (0xEA2DB82FE04A9403) has became a new signer since this | + | 2. In the previously mentioned document designed by wneriez in April 2020, |
+ | the date in its statements was mistakenly written as "April 15th, 2019", | ||
+ | which was a typo, but cannot be changed due to the nature of digital signature. | ||
+ | We declare that it's hereby corrected to "April 15th, 2020" | ||
+ | |||
+ | 3. A new member, vimacs (0xEA2DB82FE04A9403) has became a new signer since this | ||
month. You can validate the new keys by cross-checking the other two copies of | month. You can validate the new keys by cross-checking the other two copies of | ||
this document, signed by biergaizi and persmule. | this document, signed by biergaizi and persmule. | ||
- | 3. Due to the ongoing security issues of OpenPGP keyservers, it makes signature | + | 4. Due to the ongoing security issues of OpenPGP keyservers, it makes signature |
verification an issue and somewhat a challenge. For completeness, | verification an issue and somewhat a challenge. For completeness, | ||
procedures for canary verification has been added. | procedures for canary verification has been added. | ||
- | Canary Verification | + | Canary Verification |
~~~~~~~~~~~~~~~~~~~~~~~~ | ~~~~~~~~~~~~~~~~~~~~~~~~ | ||
Line 99: | Line 104: | ||
a. Unfortunately, | a. Unfortunately, | ||
servers have raised great security concerns within the community, as a | servers have raised great security concerns within the community, as a | ||
- | countermeasure, | + | countermeasure, |
https:// | https:// | ||
it's impossible to import a OpenPGP public key without User-ID for a | it's impossible to import a OpenPGP public key without User-ID for a | ||
Line 110: | Line 115: | ||
no alternative option yet. | no alternative option yet. | ||
- | c. Once the technical problem of OpenPGP | + | c. Once the technical problem of using a public key without User-ID is |
resolved, you can check the previous signatures retroactively, | resolved, you can check the previous signatures retroactively, | ||
would effectively restore the level of confidence. You can archive the | would effectively restore the level of confidence. You can archive the | ||
Line 124: | Line 129: | ||
b. Use Debian GNU/Linux operating system and install GnuPG. Other operating | b. Use Debian GNU/Linux operating system and install GnuPG. Other operating | ||
- | systems may lack necessary out-of-tree GnuPG patches required, Debian | + | systems may lack the necessary out-of-tree GnuPG patches required, Debian |
- | be used. | + | |
c. Fetch vimacs' | c. Fetch vimacs' | ||
Line 144: | Line 149: | ||
f. Now, it's possible to verify the signature by following the standard | f. Now, it's possible to verify the signature by following the standard | ||
procedures. Ignore the "key expired" | procedures. Ignore the "key expired" | ||
- | not published, only the expired UIDs are available. | + | not published, only the expired UIDs are available). |
Proof of Freshness | Proof of Freshness | ||
Line 150: | Line 155: | ||
$ rsstail -1 -n5 -N -u https:// | $ rsstail -1 -n5 -N -u https:// | ||
- | When will UK lockdown end? The Government' | + | Dame Vera Lynn dies aged 103 |
- | Can I see my family or friends under the new social distancing rules? | + | |
- | How does a coronavirus antibody home test kit work, and how do I get one? | + | The R rate: Is it reliable and how does it compare across |
- | What essential shops are open during | + | The NHS Test and Trace system, explained |
- | ' | + | Do I need to self-quarantine for 14 days after travel - and what are the rules? |
$ rsstail -1 -n5 -N -u https:// | $ rsstail -1 -n5 -N -u https:// | ||
- | | + | As Kim Jong-un Turns Hostile to South Korea, His Sister Does the Talking |
- | China Is Defensive. The U.S. Is Absent. Can the Rest of the World Fill the Void? | + | Coronavirus |
- | | + | On China-India Border, Xi and Modi Have Little Room to Give |
- | This Afghan General Fought the Taliban for Years. Now He Has Joined Them. | + | Englands World Beating System to Track Coronavirus |
- | If U.K. Schools Reopen, Will the Students Return? | + | |
$ date -R -u | $ date -R -u | ||
- | Tue, 12 May 2020 03:46:23 +0000 | + | Thu, 18 Jun 2020 09:01:22 +0000 |
-----BEGIN PGP SIGNATURE----- | -----BEGIN PGP SIGNATURE----- | ||
- | iQEzBAEBCgAdFiEEwonfPqgFyacM7J3iwYAPuUJ74CEFAl66HEIACgkQwYAPuUJ7 | + | iQEzBAEBCgAdFiEEwonfPqgFyacM7J3iwYAPuUJ74CEFAl7rLXsACgkQwYAPuUJ7 |
- | 4CF6NQf/TS4UfVqBwMSradcYixPXfl2i6jTevfPL7V4I0Ufns1S7xrZP8CwgsQn0 | + | 4CGFqgf/WeXbAkTTB9pnuhlYK219ppSD9H6V+WoZDeZkN1cYokXCvI332443B3eu |
- | iItnqAL9KxRSWgJr9vZ7SRGuURojeWDXiSrAT1HS3QSBPuPyq91nbc8YrnigNkwZ | + | /D1RxO4hUxWkv+m7a4pS+CLIdTbVDTyA4y7Z58xon9+ss+HtFbs+b5iPeUIZJf8U |
- | rCiB/ukr4gQS1YoANX7z8ITUXA0ndLml8G8BoFP1Lwd2IDPniI+itEZCMEaxMYoC | + | CSa+iOa4J356Li9Y3UQ60ugid0/ |
- | OhYaeDppHgdNqbWvl8ssSPUaNvtWd0Uvmiv3vI6+GcSnm3lNivFQRRUeUrd2nXcY | + | zTY8sp08YrDdNOXcQrtZ/nOZp2fQrrbrqx1Nt96Ya1v90YA/ |
- | I4Xp/nGAOpDgIkblEdgPd0VctZWufbisO+U7kGaQAUUWlPLgOqTkGxoPrUdiaxP+ | + | +ZmJpm7PsZj9eX3lOelk0kYJEdT5BYGafKirCPn34bMZn8RdmXnnmzgHpibd3qsC |
- | dhBbyEZSCCizvGKLC8imusNQhGIZdg== | + | BczliRynRNgOuofm6Uw6eGJX64N48g== |
- | =F6Qz | + | =KpQ1 |
-----END PGP SIGNATURE----- | -----END PGP SIGNATURE----- | ||
</ | </ |