Updates tagged with pgp on Hacker Poesy!
lnxw48a1: https://lifehacker.com/how-to-encrypt-your-email-and-keep-your-conversations-p-1133495744 [lifehacker com] learn how and why to use #pgp / #gpg
lnxw48a1's status on Friday, 23-Oct-2020 18:54:29 EDT
https://lifehacker.com/how-to-encrypt-your-email-and-keep-your-conversations-p-1133495744 [lifehacker com] learn how and why to use #pgp / #gpg
lnxw48a1: https://github.com/lfit/itpol/blob/master/protecting-code-integrity.md Protecting code integrity with #PGP / #GPG
lnxw48a1's status on Wednesday, 29-Jul-2020 12:11:21 EDT
https://github.com/lfit/itpol/blob/master/protecting-code-integrity.md Protecting code integrity with #PGP / #GPG
lnxw48a1: https://nu.federati.net/url/255372 #pgp #gpg #sha-1 #software_signing #vulnerability #exploit
lnxw48a1's status on Tuesday, 07-Jan-2020 18:36:21 EST
https://nu.federati.net/url/255372 #pgp #gpg #sha-1 #software_signing #vulnerability #exploit
rozzin: That #Tails "use the WoT" download #verification guide is telling you to do 2 distinct things: 1) use #PGP WoT metrics to identify someone who is a Tails developer (but not AFAICT to identify that person *as* a Tails developer); 2) make a WoT-less leap from "this is Bob" to "Bob is verified as a Tails developer AND his signatures mean something". In that "→A→B→C" chain of mixed ops, #WoT only takes you to B.
rozzin's status on Wednesday, 03-Jul-2019 01:15:55 EDT
That #Tails "use the WoT" download #verification guide is telling you to do 2 distinct things: 1) use #PGP WoT metrics to identify someone who is a Tails developer (but not AFAICT to identify that person *as* a Tails developer); 2) make a WoT-less leap from "this is Bob" to "Bob is verified as a Tails developer AND his signatures mean something". In that "→A→B→C" chain of mixed ops, #WoT only takes you to B.
rozzin: That #PGP's #WoT metrics (supposedly) propagate through signature-chains is somehow basically an extremely popular #myth; "talks about WoT being all about arbitrarily-long multi-hop chains of trust" and "conflates #trust and #identity #certification" have been "understands-pgp-p" litmus tests for me since I realized how confused *I was myself* years ago, and they've never failed before.
rozzin's status on Wednesday, 03-Jul-2019 00:49:32 EDT
That #PGP's #WoT metrics (supposedly) propagate through signature-chains is somehow basically an extremely popular #myth; "talks about WoT being all about arbitrarily-long multi-hop chains of trust" and "conflates #trust and #identity #certification" have been "understands-pgp-p" litmus tests for me since I realized how confused *I was myself* years ago, and they've never failed before.
rozzin: Contrary to popular belief, "trust paths" are not actually a thing in #PGP.
rozzin's status on Tuesday, 02-Jul-2019 08:12:09 EDT
Contrary to popular belief, "trust paths" are not actually a thing in #PGP.
rozzin: ALSO, I'm reminded that there was this other #HKP #keyserver released a few years ago, compatible w/ #SKS but written in #Golang, which might relieve some of "zomg unmaintainable!" problems with the SKS servers: https://hockeypuck.github.io/ !crypto #PGP #GnuPG
rozzin's status on Monday, 01-Jul-2019 15:50:40 EDT
ALSO, I'm reminded that there was this other #HKP #keyserver released a few years ago, compatible w/ #SKS but written in #Golang, which might relieve some of "zomg unmaintainable!" problems with the SKS servers: https://hockeypuck.github.io/ !crypto #PGP #GnuPG
rozzin: With the sudden realization that #Enigmail has been able to decrypt #email permanently upon reception for the last 3 years, I'm excited about using #PGP #crypto w/ #Enigmail again! But, oh, just in time for me #Mozilla broke Enigmail in #Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=909000 #ugh
rozzin's status on Friday, 28-Sep-2018 16:37:05 EDT
With the sudden realization that #Enigmail has been able to decrypt #email permanently upon reception for the last 3 years, I'm excited about using #PGP #crypto w/ #Enigmail again! But, oh, just in time for me #Mozilla broke Enigmail in #Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=909000 #ugh
rozzin: Holy crap! "Since version 1.8, Enigmail can decrypt mails permanently." https://enigmail.net/index.php/en/faq-en?view=topic&id=15 #enigmail #pgp #crypto
rozzin's status on Friday, 28-Sep-2018 16:22:38 EDT
Holy crap! "Since version 1.8, Enigmail can decrypt mails permanently." https://enigmail.net/index.php/en/faq-en?view=topic&id=15 #enigmail #pgp #crypto
maiyannah: maiyannah favorited something by rozzin: Wow: !TIL that #keybase was founded on a fundamental misunderstanding about how the #PGP / #GnuPG #weboftrust works: http://web.archive.org/web/20141027135352/https://keybase.io/docs/tracking https://lists.gnupg.org/pipermail/gnupg-users/2014-December/051939.html https://www.linux.com/blog/pgp-web-trust-delegated-trust-and-keyservers
maiyannah's status on Sunday, 21-May-2017 16:24:31 EDT
maiyannah favorited something by rozzin: Wow: !TIL that #keybase was founded on a fundamental misunderstanding about how the #PGP / #GnuPG #weboftrust works: http://web.archive.org/web/20141027135352/https://keybase.io/docs/tracking https://lists.gnupg.org/pipermail/gnupg-users/2014-December/051939.html https://www.linux.com/blog/pgp-web-trust-delegated-trust-and-keyservers
rozzin: Wow: !TIL that #keybase was founded on a fundamental misunderstanding about how the #PGP / #GnuPG #weboftrust works: http://web.archive.org/web/20141027135352/https://keybase.io/docs/tracking https://lists.gnupg.org/pipermail/gnupg-users/2014-December/051939.html https://www.linux.com/blog/pgp-web-trust-delegated-trust-and-keyservers
rozzin's status on Sunday, 21-May-2017 15:16:27 EDT
Wow: !TIL that #keybase was founded on a fundamental misunderstanding about how the #PGP / #GnuPG #weboftrust works: http://web.archive.org/web/20141027135352/https://keybase.io/docs/tracking https://lists.gnupg.org/pipermail/gnupg-users/2014-December/051939.html https://www.linux.com/blog/pgp-web-trust-delegated-trust-and-keyservers
bobjonkmanformer: @csaurus A message sent to multiple !GnuPG (or #PGP) recipients uses a symmetric key generated for that session to encrypt the message, and then encrypts that symmetric key with the public key for each recipient, creating multiple encrypted key packets. When you receive such a message your GnuPG finds the packet with the symmetric key encrypted to your public key, decrypts it with http://sn.jonkman.ca/notice/1191133
bobjonkmanformer's status on Tuesday, 13-Dec-2016 18:42:02 EST
@csaurus A message sent to multiple !GnuPG (or #PGP) recipients uses a symmetric key generated for that session to encrypt the message, and then encrypts that symmetric key with the public key for each recipient, creating multiple encrypted key packets. When you receive such a message your GnuPG finds the packet with the symmetric key encrypted to your public key, decrypts it with…
Former Bob Jonkman -- Please use the new server at https://gs.jonkman.ca
qbi: Vorsicht, da draußen sind gefälschte PGP-Schlüssel von mir im Umlauf: http://qttr.at/1fwj #pgp #gnupg !security !verschluesselung
qbi's status on Tuesday, 16-Aug-2016 11:16:55 EDT
Vorsicht, da draußen sind gefälschte PGP-Schlüssel von mir im Umlauf: http://qttr.at/1fwj #pgp #gnupg !security !verschluesselung
arunisaac: !privacy !crypto Don't the signatures on #PGP public keys in a web of trust give away the social graph?
arunisaac's status on Friday, 05-Aug-2016 05:28:40 EDT
!privacy !crypto Don't the signatures on #PGP public keys in a web of trust give away the social graph?
bobjonkmanformer: ♻ @gnupg@twitter.com !GnuPG 2.1.14 released: https://lists.gnupg.org/pipermail/gnupg-announce/2016q3/000393.html #pgp #gpg !privacy
bobjonkmanformer's status on Thursday, 14-Jul-2016 12:54:12 EDT
♻ @gnupg@twitter.com !GnuPG 2.1.14 released: https://lists.gnupg.org/pipermail/gnupg-announce/2016q3/000393.html #pgp #gpg !privacy
bobjonkman2: I'm the Keymaster for the Formal Keysigning at the #KWLUG "Short Presentations and Activities" meeting on 8 August 2016. For anyone who wants to participate, here are the preparation instructions: http://sobac.com/wiki/index.php/KWLUG_Keysigning_2016-08-08 #Crypto #GnuPG #PGP
bobjonkman2's status on Sunday, 10-Jul-2016 23:16:14 EDT
I'm the Keymaster for the Formal Keysigning at the #KWLUG "Short Presentations and Activities" meeting on 8 August 2016. For anyone who wants to participate, here are the preparation instructions: http://sobac.com/wiki/index.php/KWLUG_Keysigning_2016-08-08 #Crypto #GnuPG #PGP
ghostdancer: dear !gnusocial , have any of you received a mail for a #gpg #pgp survey by the Oxford Internet Institute? !privacy
ghostdancer's status on Sunday, 12-Jun-2016 07:46:21 EDT
dear !gnusocial , have any of you received a mail for a #gpg #pgp survey by the Oxford Internet Institute? !privacy
armistace: have you guys heard about this! https://lwn.net/Articles/689792/rss I have had the same pgp key for years now does this I mean I possibly need to change? !gnusocial #privacy #pgp
armistace's status on Friday, 03-Jun-2016 20:07:43 EDT
have you guys heard about this! https://lwn.net/Articles/689792/rss I have had the same pgp key for years now does this I mean I possibly need to change? !gnusocial #privacy #pgp
deavmi: deavmi favorited something by rozzin: Can't remember: who had the clever !coffee #mug with his #PGP fingerprint on it?
deavmi's status on Wednesday, 11-May-2016 00:38:00 EDT
deavmi favorited something by rozzin: Can't remember: who had the clever !coffee #mug with his #PGP fingerprint on it?
rozzin: Can't remember: who had the clever !coffee #mug with his #PGP fingerprint on it?
rozzin's status on Wednesday, 11-May-2016 00:36:37 EDT
Can't remember: who had the clever !coffee #mug with his #PGP fingerprint on it?
rozzin: @windigo, I guess that's why ID-certification and trust are two separate things in #PGP, "sign" and "tsign" are separate commands in #GnuPG, and nobody uses "tsign" ;)
rozzin's status on Thursday, 24-Mar-2016 14:53:28 EDT
@windigo, I guess that's why ID-certification and trust are two separate things in #PGP, "sign" and "tsign" are separate commands in #GnuPG, and nobody uses "tsign" ;)
windigo: windigo favorited something by rozzin: Met a bunch of awesome people at #lp2016. And few… #interesting ones. Like the one who refused to sign my #PGP key because she thought I was a government spook… because I claimed to be from #NH but "didn't know that *every* FreeStater is (obviously) #crypto savvy enough to sign PGP keys… since most of them use #bitcoin as their only currency… so they can remain anonymous". #wtf #notevenwrong
windigo's status on Thursday, 24-Mar-2016 13:16:09 EDT
windigo favorited something by rozzin: Met a bunch of awesome people at #lp2016. And few… #interesting ones. Like the one who refused to sign my #PGP key because she thought I was a government spook… because I claimed to be from #NH but "didn't know that *every* FreeStater is (obviously) #crypto savvy enough to sign PGP keys… since most of them use #bitcoin as their only currency… so they can remain anonymous". #wtf #notevenwrong
mmn: mmn favorited something by rozzin: Met a bunch of awesome people at #lp2016. And few... #interesting ones. Like the one who refused to sign my #PGP key because she thought I was a government spook... because I claimed to be from #NH but "didn't know that *every* FreeStater is (obviously) #crypto savvy enough to sign PGP keys... since most of them use #bitcoin as their only currency... so they can remain anonymous". #wtf #notevenwrong
mmn's status on Wednesday, 23-Mar-2016 05:47:08 EDT
mmn favorited something by rozzin: Met a bunch of awesome people at #lp2016. And few... #interesting ones. Like the one who refused to sign my #PGP key because she thought I was a government spook... because I claimed to be from #NH but "didn't know that *every* FreeStater is (obviously) #crypto savvy enough to sign PGP keys... since most of them use #bitcoin as their only currency... so they can remain anonymous". #wtf #notevenwrong
rozzin: Met a bunch of awesome people at #lp2016. And few... #interesting ones. Like the one who refused to sign my #PGP key because she thought I was a government spook... because I claimed to be from #NH but "didn't know that *every* FreeStater is (obviously) #crypto savvy enough to sign PGP keys... since most of them use #bitcoin as their only currency... so they can remain anonymous". #wtf #notevenwrong
rozzin's status on Tuesday, 22-Mar-2016 23:17:35 EDT
Met a bunch of awesome people at #lp2016. And few... #interesting ones. Like the one who refused to sign my #PGP key because she thought I was a government spook... because I claimed to be from #NH but "didn't know that *every* FreeStater is (obviously) #crypto savvy enough to sign PGP keys... since most of them use #bitcoin as their only currency... so they can remain anonymous". #wtf #notevenwrong
kzimmermann: !til about two important Zimmermanns: Phillip Zimmermann, creator of #PGP, and Jérémie Zimmermann from La Quadrature Du Net. #greatnames
kzimmermann's status on Thursday, 31-Dec-2015 09:46:37 EST
!til about two important Zimmermanns: Phillip Zimmermann, creator of #PGP, and Jérémie Zimmermann from La Quadrature Du Net. #greatnames
fsf: Teaching #EmailSelfDefense: Campaigns intern leads a workshop at PorcFest https://u.fsf.org/1ck #encryption #privacy #PGP
fsf's status on Thursday, 02-Jul-2015 16:24:54 EDT
Teaching #EmailSelfDefense: Campaigns intern leads a workshop at PorcFest https://u.fsf.org/1ck #encryption #privacy #PGP
qbi: Wie sieht es mit #PGP in anderen Landtagen aus? Wieviel Abgeordnete nutzen GnuPG/PGP? !crypto
qbi's status on Monday, 30-Mar-2015 04:11:06 EDT
Wie sieht es mit #PGP in anderen Landtagen aus? Wieviel Abgeordnete nutzen GnuPG/PGP? !crypto
rozzin: I'm a fan of #hardcopy #plaintext #PGP fingerprints ☺
rozzin's status on Thursday, 12-Mar-2015 08:18:23 EDT
I'm a fan of #hardcopy #plaintext #PGP fingerprints ☺
rozzin: "The #Debian #PGP #disaster that almost was": http://rdist.root.org/2009/05/17/the-debian-pgp-disaster-that-almost-was/ !crypto
rozzin's status on Saturday, 14-Feb-2015 18:47:12 EST
"The #Debian #PGP #disaster that almost was": http://rdist.root.org/2009/05/17/the-debian-pgp-disaster-that-almost-was/ !crypto
rozzin: @boneidol, I'd rather bank on #DKIM. Or #PGP. Or S/MIME.
rozzin's status on Monday, 02-Feb-2015 22:58:16 EST
@boneidol, I'd rather bank on #DKIM. Or #PGP. Or S/MIME.
rozzin: I need to get some new #businesscards made up before #libreplanet 2015, with an updated #PGP fingerprint and my #gnusocial address....
rozzin's status on Friday, 12-Dec-2014 18:24:01 EST
I need to get some new #businesscards made up before #libreplanet 2015, with an updated #PGP fingerprint and my #gnusocial address....
rozzin: PGP pathfinder, a tool that finds trust-paths between #PGP keys: http://pgp.cs.uu.nl/
rozzin's status on Thursday, 07-Aug-2014 11:45:19 EDT
PGP pathfinder, a tool that finds trust-paths between #PGP keys: http://pgp.cs.uu.nl/
erkanyilmaz: I'm sure there's also some #pgp integration for #email clients out there
erkanyilmaz's status on Wednesday, 16-Jul-2014 16:55:42 EDT
I'm sure there's also some #pgp integration for #email clients out there
lnxw48: @bobjonkman @sergiodj @aqeeliz @tobias There is also #Claws-Mail, which defaults to plain text (not sure whether UTF-8) and does not require a separate add-on to use #gpg / #pgp. It was my main client for a few years, but I’m back to #thunderbird.
lnxw48's status on Monday, 09-Jun-2014 02:23:39 EDT
@bobjonkman @sergiodj @aqeeliz @tobias There is also #Claws-Mail, which defaults to plain text (not sure whether UTF-8) and does not require a separate add-on to use #gpg / #pgp. It was my main client for a few years, but I’m back to #thunderbird.
lnxw48: @erkan Yikes! Exposing one’s #pgp / #gpg keys to a web browser is a really bad idea. !security
lnxw48's status on Wednesday, 04-Jun-2014 12:49:23 EDT
@erkan Yikes! Exposing one’s #pgp / #gpg keys to a web browser is a really bad idea. !security
patrickniedzielski: I will be giving a talk on Tuesday at 5p entitled, "Trust is Key: Integrating PGP into your Free Software development workflow," with a keysigning party to follow. This event is open to the public, so anyone in the greater Ithaca, NY, area can attend. More information can be found at <http://ur1.ca/h4pdo>. (This was originally planned for a week ago, but due to room reservat http://micro.fragdev.com/notice/1038600
patrickniedzielski's status on Sunday, 20-Apr-2014 14:52:15 EDT
I will be giving a talk on Tuesday at 5p entitled, "Trust is Key: Integrating PGP into your Free Software development workflow," with a keysigning party to follow. This event is open to the public, so anyone in the greater Ithaca, NY, area can attend. More information can be found at <" title="http://ur1.ca/h4pdo>" rel="nofollow external">http://ur1.ca/h4pdo>. (This was originally planned for a week ago, but due to room reservat…
patrickniedzielski: I'll be giving a talk on #PGP and its uses as well as running a keysigning party this Thursday at #Cornell. Slides will be posted following the talk. !crypto !privacy
patrickniedzielski's status on Saturday, 05-Apr-2014 18:04:21 EDT
I'll be giving a talk on #PGP and its uses as well as running a keysigning party this Thursday at #Cornell. Slides will be posted following the talk. !crypto !privacy
erkanyilmaz: boy, was I laughing when I read that about #PGP and #NSA. more smiles came in when I heard that the newspaper had the info since #10 months (and #Snowden probably longer) ;-) cc @question
erkanyilmaz's status on Tuesday, 01-Apr-2014 05:54:09 EDT
boy, was I laughing when I read that about #PGP and #NSA. more smiles came in when I heard that the newspaper had the info since #10 months (and #Snowden probably longer) ;-) cc @question
erkanyilmaz: the history of #pgp would have been different if not for the birthday of Phil Zimmermann #60 years ago https://en.wikipedia.org/wiki/Phil_Zimmermann
erkanyilmaz's status on Wednesday, 12-Feb-2014 14:37:32 EST
the history of #pgp would have been different if not for the birthday of Phil Zimmermann #60 years ago https://en.wikipedia.org/wiki/Phil_Zimmermann
evan: RT @evan You know who hates April Fools Day? People who are too stupid to think up their own pranks. #cognitivedissonance #hgh #pgp
evan's status on Tuesday, 26-Mar-2013 09:12:52 EDT
RT @evan You know who hates April Fools Day? People who are too stupid to think up their own pranks. #cognitivedissonance #hgh #pgp
evan: You know who hates April Fools Day? People who are too stupid to think up their own pranks. #cognitivedissonance #hgh #pgp
evan's status on Tuesday, 26-Mar-2013 09:06:38 EDT
You know who hates April Fools Day? People who are too stupid to think up their own pranks. #cognitivedissonance #hgh #pgp
zack: dear #lazyweb, the #PGP key statistics service at http://ur1.ca/bg7wm stopped updating on Apr 2012, do you know of any substitute? #gnupg
zack's status on Monday, 26-Nov-2012 11:31:22 EST
dear #lazyweb, the #PGP key statistics service at http://ur1.ca/bg7wm stopped updating on Apr 2012, do you know of any substitute? #gnupg
eightyeight: ugh. it appears that #yahoo groups is stripping #mime attachments, which means using "send-hook" for !mutt to use #pgp inline. !crypto
eightyeight's status on Thursday, 24-May-2012 15:27:09 EDT
ugh. it appears that #yahoo groups is stripping #mime attachments, which means using "send-hook" for !mutt to use #pgp inline. !crypto