blug-canary-2
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
|
blug-canary-2 [2020/05/12 03:48] persmule |
blug-canary-2 [2020/07/16 16:22] persmule |
||
|---|---|---|---|
| Line 8: | Line 8: | ||
| ==================================== | ==================================== | ||
| - | Issued for May 2020. | + | Issued for July 2020. |
| Don't just trust the contents of this file blindly! Verify the | Don't just trust the contents of this file blindly! Verify the | ||
| Line 63: | Line 63: | ||
| 10. We plan to publish the next of these canary statements in the first three | 10. We plan to publish the next of these canary statements in the first three | ||
| - | weeks of June 2020. Special note should be taken if no new canary is published | + | weeks of August |
| by that time or if the list of statements changes without plausible explanation. | by that time or if the list of statements changes without plausible explanation. | ||
| Line 71: | Line 71: | ||
| 1. Due to personal reasons, wnereiz (0xFDFF2E13AA25BE72) voluntarily decided | 1. Due to personal reasons, wnereiz (0xFDFF2E13AA25BE72) voluntarily decided | ||
| to quit from the warrant canary team and he is no longer a signer of the | to quit from the warrant canary team and he is no longer a signer of the | ||
| - | warrant canary documents since April 15th, 2019. All statements from the | + | warrant canary documents since April 15th, 2020. All statements from the |
| warrant canary documents before this date are still valid. This is an official | warrant canary documents before this date are still valid. This is an official | ||
| - | desicion | + | decision |
| signed by wneriez. | signed by wneriez. | ||
| - | 2. A new member, vimacs (0xEA2DB82FE04A9403) has became a new signer since this | + | 2. In the previously mentioned document designed by wneriez in April 2020, |
| + | the date in its statements was mistakenly written as "April 15th, 2019", | ||
| + | which was a typo, but cannot be changed due to the nature of digital signature. | ||
| + | We declare that it's hereby corrected to "April 15th, 2020" | ||
| + | |||
| + | 3. A new member, vimacs (0xEA2DB82FE04A9403) has became a new signer since this | ||
| month. You can validate the new keys by cross-checking the other two copies of | month. You can validate the new keys by cross-checking the other two copies of | ||
| this document, signed by biergaizi and persmule. | this document, signed by biergaizi and persmule. | ||
| - | 3. Due to the ongoing security issues of OpenPGP keyservers, it makes signature | + | 4. Due to the ongoing security issues of OpenPGP keyservers, it makes signature |
| verification an issue and somewhat a challenge. For completeness, | verification an issue and somewhat a challenge. For completeness, | ||
| procedures for canary verification has been added. | procedures for canary verification has been added. | ||
| - | Canary Verification | + | Canary Verification |
| ~~~~~~~~~~~~~~~~~~~~~~~~ | ~~~~~~~~~~~~~~~~~~~~~~~~ | ||
| Line 99: | Line 104: | ||
| a. Unfortunately, | a. Unfortunately, | ||
| servers have raised great security concerns within the community, as a | servers have raised great security concerns within the community, as a | ||
| - | countermeasure, | + | countermeasure, |
| https:// | https:// | ||
| it's impossible to import a OpenPGP public key without User-ID for a | it's impossible to import a OpenPGP public key without User-ID for a | ||
| Line 110: | Line 115: | ||
| no alternative option yet. | no alternative option yet. | ||
| - | c. Once the technical problem of OpenPGP | + | c. Once the technical problem of using a public key without User-ID is |
| resolved, you can check the previous signatures retroactively, | resolved, you can check the previous signatures retroactively, | ||
| would effectively restore the level of confidence. You can archive the | would effectively restore the level of confidence. You can archive the | ||
| Line 124: | Line 129: | ||
| b. Use Debian GNU/Linux operating system and install GnuPG. Other operating | b. Use Debian GNU/Linux operating system and install GnuPG. Other operating | ||
| - | systems may lack necessary out-of-tree GnuPG patches required, Debian | + | systems may lack the necessary out-of-tree GnuPG patches required, Debian |
| - | be used. | + | |
| c. Fetch vimacs' | c. Fetch vimacs' | ||
| Line 144: | Line 149: | ||
| f. Now, it's possible to verify the signature by following the standard | f. Now, it's possible to verify the signature by following the standard | ||
| procedures. Ignore the "key expired" | procedures. Ignore the "key expired" | ||
| - | not published, only the expired UIDs are available. | + | not published, only the expired UIDs are available). |
| Proof of Freshness | Proof of Freshness | ||
| Line 150: | Line 155: | ||
| $ rsstail -1 -n5 -N -u https:// | $ rsstail -1 -n5 -N -u https:// | ||
| - | When will UK lockdown end? The Government's exit plan, explained | + | Travel latest: Scottish hotels lose bookings as Sturgeon threatens to quarantine English visitors |
| - | Can I see my family or friends under the new social distancing | + | Azeri minister sacked for ' |
| - | How does a coronavirus antibody home test kit work, and how do I get one? | + | Leicester lockdown map: What are the rules, and when will it end? |
| - | What essential shops are open during the coronavirus lockdown? | + | Shoppers paid 2.50 to call customer helplines they could have called for free |
| - | ' | + | Winona Ryder says it is 'impossible' |
| $ rsstail -1 -n5 -N -u https:// | $ rsstail -1 -n5 -N -u https:// | ||
| - | Coronavirus World Tracker: Germany, Britain, Wuhan | + | |
| - | China Is Defensive. The U.S. Is Absent. Can the Rest of the World Fill the Void? | + | Can Angela Merkel Seal Her Legacy With a Coronavirus Rescue Deal? |
| - | Victim or Executioner? Let the Computer Decide | + | Big Business in Bangladesh: Selling Fake Coronavirus Certificates |
| - | This Afghan General Fought the Taliban for Years. Now He Has Joined | + | |
| - | | + | |
| $ date -R -u | $ date -R -u | ||
| - | Tue, 12 May 2020 03:46:23 +0000 | + | Thu, 16 Jul 2020 15:48:07 +0000 |
| -----BEGIN PGP SIGNATURE----- | -----BEGIN PGP SIGNATURE----- | ||
| - | iQEzBAEBCgAdFiEEwonfPqgFyacM7J3iwYAPuUJ74CEFAl66HEIACgkQwYAPuUJ7 | + | iQEzBAEBCgAdFiEEwonfPqgFyacM7J3iwYAPuUJ74CEFAl8QdsUACgkQwYAPuUJ7 |
| - | 4CF6NQf/TS4UfVqBwMSradcYixPXfl2i6jTevfPL7V4I0Ufns1S7xrZP8CwgsQn0 | + | 4CHZ7gf/UWfWUcMSOQenMfHPz2DRupY4GedG7Q3M6DF+tmjMFBsT9cq/ |
| - | iItnqAL9KxRSWgJr9vZ7SRGuURojeWDXiSrAT1HS3QSBPuPyq91nbc8YrnigNkwZ | + | UUUX3gQLrMTIledYyUcUyXIwsP095BFMXYBjof1EJkyW7iSEERabH9b9bUCF1H2T |
| - | rCiB/ukr4gQS1YoANX7z8ITUXA0ndLml8G8BoFP1Lwd2IDPniI+itEZCMEaxMYoC | + | gI4l+lGb3Fy6Zdupb79R94/ccNm22yPxQ6WpOs9vTn7oBEiQnHU+S1vN21Tu89yr |
| - | OhYaeDppHgdNqbWvl8ssSPUaNvtWd0Uvmiv3vI6+GcSnm3lNivFQRRUeUrd2nXcY | + | vjhohFWUfvoPqWV1mgp2A1x5lE+aochtkyWWnJOxkUe6SQPcxwvBQYgnBoEEGFd3 |
| - | I4Xp/nGAOpDgIkblEdgPd0VctZWufbisO+U7kGaQAUUWlPLgOqTkGxoPrUdiaxP+ | + | hRZNXCfpVJeMAzc9VwZn/ZKKvDTI7WZ29+0Q/ |
| - | dhBbyEZSCCizvGKLC8imusNQhGIZdg== | + | x6F7SwdEI355H3KLRkP0lgWnzLBDEw== |
| - | =F6Qz | + | =N9h9 |
| -----END PGP SIGNATURE----- | -----END PGP SIGNATURE----- | ||
| </ | </ | ||
blug-canary-2.txt · Last modified: 2024/04/29 15:13 by persmule
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
