logo

blog

Unnamed repository; edit this file 'description' to name the repository.
commit 32e4ace991067dbd7fc917e4516aa45118dda3c0
parent e08bffdaa86c1d5ea122111dfc8a9600ef071925
Author: Haelwenn (lanodan) Monnier <contact@hacktivis.me>
Date:   Fri,  5 May 2017 21:10:41 +0200

canary.asc: I broke HPKP

Diffstat:
canary.asc | 29+++++++++++++++--------------
1 file changed, 15 insertions(+), 14 deletions(-)

diff --git a/canary.asc b/canary.asc @@ -1,5 +1,5 @@ -----BEGIN PGP SIGNED MESSAGE----- -Hash: SHA256 +Hash: SHA512 This is an OpenPGP[why?] signed canary. The first attempt to do one failed… (I’m bad at having habits) I choosed OpenPGP because it allows to: @@ -20,6 +20,7 @@ This canary will be updated as often as possible and cryptographicaly expires af • my disks(HDDs and SSDs) are cyphered and minion(server) have cyphered logs • my keys are all safe and protected and old ones are revoked and few old ones unuseable(shred) • On 2016-12-17 I made myself a new keyring, the old one was a huge mess… sorry for the mess of revoked keys + • On 2017-05-03 04:19:00 I made new (ECC) keys, after hardware failure and no backups or old keys, and so broke HPKP == TL;DR == • I’m safe but you should not have a blind trust on me. @@ -34,17 +35,17 @@ Inspired by: https://fyb.patternsinthevoid.net/canary.asc and https://github.com 1: https://hacktivis.me/articles/La%20neutralit%C3%A9e%20du%20Net%20sur%20un%20wifi%20Orange%E2%84%A2,%20deuxi%C3%A8me%20mensonge -----BEGIN PGP SIGNATURE----- -iQIiBAEBCAAMBQJYVHraBYMA7U4AAAoJEAGWlpOjDIcyOyMP/AjIDyjDhDvrn4Yn -M9C/VpQrOHpzobHSOcVLngPA7qbMovfGnNwCQmcYtSnz0sZ9rNxLXUPtcvrZ5XGA -pCdWC2ZWZ8BRNWfjTFLWywukoMMDa9W8JCwy5i34vtOPzLdwD8Jr5tNrCLawn2lO -ZFlaVFQmQC/TdQBrzZXw+JvldI8B3YqqJYHd08rclmtV83MQO2WfXdxgqiy74/BK -ij/4A3qsMNc8qt92sMzVM+UUnMwaQpohr+CMQceQTpcm2tVQNRCpw8gxuzRenYwA -nzSz6zpAlRLv4GwswI2XyVYyt9XS6I+iCSXMwiyY42K7kUAwO8UXfv+m4Gqk6Mhi -CUZnlA+lsoitQNINRIqCeErXKM+83Y/YfyjAE17UCa4yBNocr12PtrjnWVlnjBBe -35FgncKIv7Q4lUW8FSKX+/1UyXsTO/cCg1yCOw61LTMrDCnXXsclGEmGqKP1YuCv -qCtdo/5kGLTDLmunpRvlVqD3SyZAvFDO4w3kjHvxFQXWUbc2N+GO7yfLMNmAvyek -itpMeD1/4ewRT5hx4cv+NlgWBs+ULCrHh/PlLltbGfOvcY7VeNXG7WvpJI3cTL3R -5Tyg50CgfLPYB74fNogh0mBlZMrGXzAxhrfeHgchrawd+l1rOrW69uyB/43IXhEx -OtGC/DmvUPbNCYd4Zb3VaHbtVPDi -=Ptdw +iQI5BAEBCgAjFiEEnKAFlDsjdFOiSBlNAZaWk6MMhzIFAlkMzd0FgwDtTgAACgkQ +AZaWk6MMhzIOrg/+LwFW3Kap7cPTIwcILDBc4Qywax5oTZPcviTMt2JDB7B7ep6z +5zq/HIncRod6yPkrZUThRZUaPkspBJvy/MqMnulQBcU9CIAmxqExfL6PaIR6srqq +Pd21+Icr2iXpMAZK/o0EGBHXTjx1iI9P50HMpcWH/op4C189+Zg4Yh72muyU5lEo +CsxHIeg7JeSPpHTtBMc0TX/smYosw4SWuHqJpjlvlk/JmsAopCdWnJsOq3LTqUEd +Q0wjPwCAW+zG4ZAddLMKt5bl34t/EydHkwufy/Wv8vJDRPkweUt7T8cEIhLC0VAE +xhOgU7dprjWsshQ5DmyPMIShHMzdB/ObAMf71nbAA8OPCF5d29GzVBBKjnKSi5U4 +PUuQ85fdfuZu7yC9ZlNJLvx8tcJ23cT9GQclbix6XzX4ZrITuQ7YKq6kv3IOq/DZ +OTasNZLq0UALkZrS6GVvlpohPHnK4FSInQBJBJvWAz82dmSACG46eBO3Zw3p7f4D +gBuA+jgghvVHR4Hk54R0lwZy6ms+NsfpWadYOrJQuNDrcxdvcz9S0ZPBinolZga3 +dzdmbqvLj2UIiNW4aODJAb6vPdQgY37c7YyRu+JHwmwLAAgowFnsJHfi3Nq+dnfk +xFJxScSUjuX80T+RHbL1jrWhZAxewLHuertHyFosHIsNqYHX7tzcNVseVjY= +=dQGy -----END PGP SIGNATURE-----