commit: 927e3cf43f001c468d2d3184192ccc7d1224e6bb
parent 954fd24470bd0e5c9a0c1373ddc907eddfb4359e
Author: Haelwenn (lanodan) Monnier <contact@hacktivis.me>
Date: Sat, 17 Dec 2016 00:39:33 +0100
canary: More detailled statements, fix typos, notice on my big GPG revocations
Diffstat:
| M | canary.asc | 55 | +++++++++++++++++++++++++++++++------------------------ |
1 file changed, 31 insertions(+), 24 deletions(-)
diff --git a/canary.asc b/canary.asc
@@ -7,37 +7,44 @@ I choosed OpenPGP because it allows to:
• have a crypto-signed: text, date, expiration date
• make more use of good cryptography
-Statements
-• Anything that can harm and/or have harmed data, received or send to me and or my machines:
- • SSID=orange, modifies few paquets, got fixed few hours later, no harmful data sent.
- • DNS gave a weird request, fixed directly.[1]
- • SMTPS doesn’t works, SASL fails and certificate doesn’t match
-• My private keys are all safe and protected and old ones are shred(1)-ed, revoked and unusable
+This canary will be updated as often as possible and cryptographicaly expires after 6 months.
-TL;DR
-• I’m safe.
+== Statements ==
+• anything that can harm and/or have harmed data, received or send to me and or my machines:
+ • SSID=orange, modifies few paquets, got fixed few hours later, no harmful data sent.
+ • DNS gave a weird answer, fixed directly.[1]
+ • SMTPS doesn’t works, SASL fails and certificate doesn’t match
+• no request from any law agency (warrants, court order)
+• no police raid or equivalent
+• no request for backdoors or equivalent
+• my disks(HDDs and SSDs) are cyphered and minion(server) have cyphered logs
+• my keys are all safe and protected and old ones are revoked and few old ones unuseable(shred)
+ • On 2016-12-17 I made myself a new keyring, the old one was a huge mess… sorry for the mess of revoked keys
-Inspired by: https://fyb.patternsinthevoid.net/canary.asc
+== TL;DR ==
+• I’m safe but you should not have a blind trust on me.
-Commands used
+== Commands used ==
• vim canary
• gpg --default-sig-expire 6m --clearsign canary
+• shred -u canary
+
+Inspired by: https://fyb.patternsinthevoid.net/canary.asc and https://github.com/QubesOS/qubes-secpack/blob/master/canaries
-Links
1: https://hacktivis.me/articles/La%20neutralit%C3%A9e%20du%20Net%20sur%20un%20wifi%20Orange%E2%84%A2,%20deuxi%C3%A8me%20mensonge
-----BEGIN PGP SIGNATURE-----
-iQIiBAEBCAAMBQJYOcJjBYMA7U4AAAoJEOH+GG7UxK21x0AP/1LFplwLR5rLpCUy
-C6lemRQYOwCWAxxMVug2B6FCwn2JSP94yI1HWfdUAdZBJ+rad8HrX3SVb2BO/t2h
-OeVvwLOzM4NZh9Rn47IlWcfPvmMxwPU7QSP9GeGl+t6JlNjnX+mcP8zo6fZvVfXL
-bOg5JFv0WcZsXDq1GNX+I+b/f/jCcvbN4ORNffLpbWCcIoychPTTeidp9CfgFob/
-aljkYl5Nu5svYxm7mOE8RZ8EffyPPlhiMcF+IQXbGtgduNRXRFDN+qJJZ3T2u4u5
-puK4ZgljcWvpfVDi4Aikvw6FR/nl686PwASpe57M8ivPhtEYcakiWhTIbDgN6amP
-JhXiGzkM9HZjJcFcw5gJiBEW/CLwKfsmPCAIUob2vZa61PICnUyeQOJ/8fH2064j
-Ce4PZVie8guJp9KNG4Llz0eIcpQ7+Ler/VMwDGRuPZ1sec1L8WJDcWl/EF6ZYwbV
-UdneBwEf2011Em0CA3MVcmY2XRo5IVQHgolXQMiYJdImsnIUr1cJ0BxLMOeiuFQW
-BkJUGWneypUnjKvmggigYowFK+4rxTRg8QRmykXjjP6aZGeacJj2/3jwuHlDlGoj
-aLA6zzRwr/LEONN6fSz7CclY1GVdGnWAstPnIHp7J8VKeElcuhiLzgvUi4v+Vbyi
-zu0Z++qe+t58AdQBJu4oibT/xZs6
-=XyPe
+iQIiBAEBCAAMBQJYVHraBYMA7U4AAAoJEAGWlpOjDIcyOyMP/AjIDyjDhDvrn4Yn
+M9C/VpQrOHpzobHSOcVLngPA7qbMovfGnNwCQmcYtSnz0sZ9rNxLXUPtcvrZ5XGA
+pCdWC2ZWZ8BRNWfjTFLWywukoMMDa9W8JCwy5i34vtOPzLdwD8Jr5tNrCLawn2lO
+ZFlaVFQmQC/TdQBrzZXw+JvldI8B3YqqJYHd08rclmtV83MQO2WfXdxgqiy74/BK
+ij/4A3qsMNc8qt92sMzVM+UUnMwaQpohr+CMQceQTpcm2tVQNRCpw8gxuzRenYwA
+nzSz6zpAlRLv4GwswI2XyVYyt9XS6I+iCSXMwiyY42K7kUAwO8UXfv+m4Gqk6Mhi
+CUZnlA+lsoitQNINRIqCeErXKM+83Y/YfyjAE17UCa4yBNocr12PtrjnWVlnjBBe
+35FgncKIv7Q4lUW8FSKX+/1UyXsTO/cCg1yCOw61LTMrDCnXXsclGEmGqKP1YuCv
+qCtdo/5kGLTDLmunpRvlVqD3SyZAvFDO4w3kjHvxFQXWUbc2N+GO7yfLMNmAvyek
+itpMeD1/4ewRT5hx4cv+NlgWBs+ULCrHh/PlLltbGfOvcY7VeNXG7WvpJI3cTL3R
+5Tyg50CgfLPYB74fNogh0mBlZMrGXzAxhrfeHgchrawd+l1rOrW69uyB/43IXhEx
+OtGC/DmvUPbNCYd4Zb3VaHbtVPDi
+=Ptdw
-----END PGP SIGNATURE-----
