StatusNethttps://status.hackerposse.com/api/statusnet/conversation/95724.atomConversation2024-03-29T07:46:22-04:00http://activitystrea.ms/schema/1.0/commenttag:status.hackerposse.com,2017-05-21:noticeId=122919:objectType=commentNew comment by rozzinWow: !<a href="http://eduposse.org/group/77/id" class="h-card group" title="Today I Learned... (til)">TIL</a> that #<span class="tag"><a href="http://status.hackerposse.com/tag/keybase" rel="tag">keybase</a></span> was founded on a fundamental misunderstanding about how the #<span class="tag"><a href="http://status.hackerposse.com/tag/pgp" rel="tag">PGP</a></span> / #<span class="tag"><a href="http://status.hackerposse.com/tag/gnupg" rel="tag">GnuPG</a></span> #<span class="tag"><a href="http://status.hackerposse.com/tag/weboftrust" rel="tag">weboftrust</a></span> works: <a href="http://web.archive.org/web/20141027135352/https://keybase.io/docs/tracking" title="http://web.archive.org/web/20141027135352/https://keybase.io/docs/tracking" class="attachment" id="attachment-15147" rel="nofollow external">http://web.archive.org/web/20141027135352/https://keybase.io/docs/tracking</a> <a href="https://lists.gnupg.org/pipermail/gnupg-users/2014-December/051939.html" title="https://lists.gnupg.org/pipermail/gnupg-users/2014-December/051939.html" class="attachment" id="attachment-15148" rel="nofollow external">https://lists.gnupg.org/pipermail/gnupg-users/2014-December/051939.html</a> <a href="https://www.linux.com/blog/pgp-web-trust-delegated-trust-and-keyservers" title="https://www.linux.com/blog/pgp-web-trust-delegated-trust-and-keyservers" class="attachment" id="attachment-15149" rel="nofollow external">https://www.linux.com/blog/pgp-web-trust-delegated-trust-and-keyservers</a>http://activitystrea.ms/schema/1.0/post2017-05-21T19:16:27+00:002017-05-21T19:16:27+00:00http://activitystrea.ms/schema/1.0/personhttp://status.hackerposse.com/user/1rozzinRobotanist, FOSS engineer, artist w/ a superhuman ability to distinguish shades of khaki. FoxtrotGPS, libvisualid, GNU Robots maintainer.42.76537 -71.46757rozzinJoshua Judson RosenRobotanist, FOSS engineer, artist w/ a superhuman ability to distinguish shades of khaki. FoxtrotGPS, libvisualid, GNU Robots maintainer.Nashua, New Hampshire, USAhomepagehttp://www.hackerposse.com/~rozzintruetag:status.hackerposse.com,2016-03-23:noticeId=95724:objectType=thread:crc32=ad10f5f2http://activitystrea.ms/schema/1.0/commenttag:micro.fragdev.com,2016-03-25:noticeId=1681118:objectType=noteNew comment by windigo@<a href="http://status.hackerposse.com/rozzin" class="h-card mention" title="Joshua Judson Rosen">rozzin</a> Ahh, then I misunderstood - I agree, it shouldn't really make any difference who you sign, as long as their identity is clear.http://activitystrea.ms/schema/1.0/post2016-03-25T18:52:45+00:002016-03-25T18:52:45+00:00http://activitystrea.ms/schema/1.0/personhttp://micro.fragdev.com/user/1windigoAnti-skub38.9088 -123.69307windigowindigoAnti-skubNewman, CA, UShomepagehttps://fragdev.comtruetag:status.hackerposse.com,2016-03-23:noticeId=95724:objectType=thread:crc32=ad10f5f238.9088000 -123.6930700http://activitystrea.ms/schema/1.0/commenttag:status.hackerposse.com,2016-03-24:noticeId=95824:objectType=commentNew comment by rozzinAs the #<span class="tag"><a href="http://status.hackerposse.com/tag/gnupg" rel="tag">GnuPG</a></span> manual says, bundling #<span class="tag"><a href="http://status.hackerposse.com/tag/trust" rel="tag">trust</a></span> into #<span class="tag"><a href="http://status.hackerposse.com/tag/keysigning" rel="tag">keysigning</a></span> "is generally only useful in distinct communities or groups": <a href="https://www.gnupg.org/documentation/manuals/gnupg/OpenPGP-Key-Management.html" title="https://www.gnupg.org/documentation/manuals/gnupg/OpenPGP-Key-Management.html" class="attachment" id="attachment-10289" rel="nofollow external">https://www.gnupg.org/documentation/manuals/gnupg/OpenPGP-Key-Management.html</a>http://activitystrea.ms/schema/1.0/post2016-03-24T22:30:48+00:002016-03-24T22:30:48+00:00http://activitystrea.ms/schema/1.0/personhttp://status.hackerposse.com/user/1rozzinRobotanist, FOSS engineer, artist w/ a superhuman ability to distinguish shades of khaki. FoxtrotGPS, libvisualid, GNU Robots maintainer.42.76537 -71.46757rozzinJoshua Judson RosenRobotanist, FOSS engineer, artist w/ a superhuman ability to distinguish shades of khaki. FoxtrotGPS, libvisualid, GNU Robots maintainer.Nashua, New Hampshire, USAhomepagehttp://www.hackerposse.com/~rozzintruetag:status.hackerposse.com,2016-03-23:noticeId=95724:objectType=thread:crc32=ad10f5f2http://activitystrea.ms/schema/1.0/commenttag:status.hackerposse.com,2016-03-24:noticeId=95821:objectType=commentNew comment by rozzin@<a href="http://micro.fragdev.com/windigo" class="h-card mention" title="Windigo ☴">windigo</a>, I guess that's why ID-certification and trust are two separate things in #<span class="tag"><a href="http://status.hackerposse.com/tag/pgp" rel="tag">PGP</a></span>, "sign" and "tsign" are separate commands in #<span class="tag"><a href="http://status.hackerposse.com/tag/gnupg" rel="tag">GnuPG</a></span>, and nobody uses "tsign" ;)http://activitystrea.ms/schema/1.0/post2016-03-24T18:53:28+00:002016-03-24T18:53:28+00:00http://activitystrea.ms/schema/1.0/personhttp://status.hackerposse.com/user/1rozzinRobotanist, FOSS engineer, artist w/ a superhuman ability to distinguish shades of khaki. FoxtrotGPS, libvisualid, GNU Robots maintainer.42.76537 -71.46757rozzinJoshua Judson RosenRobotanist, FOSS engineer, artist w/ a superhuman ability to distinguish shades of khaki. FoxtrotGPS, libvisualid, GNU Robots maintainer.Nashua, New Hampshire, USAhomepagehttp://www.hackerposse.com/~rozzintruetag:status.hackerposse.com,2016-03-23:noticeId=95724:objectType=thread:crc32=ad10f5f2http://activitystrea.ms/schema/1.0/commenttag:micro.fragdev.com,2016-03-24:noticeId=1679119:objectType=noteNew comment by windigo@<a href="http://status.hackerposse.com/rozzin" class="h-card mention" title="Joshua Judson Rosen">rozzin</a> If bad guys get thrown into the web of trust, it allows them to sign other bad guys' impostor keys. :)http://activitystrea.ms/schema/1.0/post2016-03-24T17:18:40+00:002016-03-24T17:18:40+00:00http://activitystrea.ms/schema/1.0/personhttp://micro.fragdev.com/user/1windigoAnti-skub38.9088 -123.69307windigowindigoAnti-skubNewman, CA, UShomepagehttps://fragdev.comtruetag:status.hackerposse.com,2016-03-23:noticeId=95724:objectType=thread:crc32=ad10f5f238.9088000 -123.6930700http://activitystrea.ms/schema/1.0/commenttag:social.umeahackerspace.se,2016-03-24:noticeId=435298:objectType=commentNew comment by mmn@<a href="http://status.hackerposse.com/user/1" class="h-card u-url p-nickname mention" title="Joshua Judson Rosen">rozzin</a> Yeah, if we just change the baseline to certified, encrypted domains, we won't need any terminology as today about "secure connections", meaning we can shift that to mean "not evil" instead.<br /> <br /> The certification method should of course be configurable from CAs to whatever, since today's PKI is far from secure anyway.http://activitystrea.ms/schema/1.0/post2016-03-24T14:51:51+00:002016-03-24T14:51:51+00:00http://activitystrea.ms/schema/1.0/personhttps://social.umeahackerspace.se/user/2mmnFree software and free culture fanatic.63.82842 20.25972mmnMMN-o ✅⃠Free software and free culture fanatic.Umeå, Swedenhomepagehttps://blog.mmn-o.se/truetag:status.hackerposse.com,2016-03-23:noticeId=95724:objectType=thread:crc32=ad10f5f263.8284200 20.2597200http://activitystrea.ms/schema/1.0/commenttag:status.hackerposse.com,2016-03-24:noticeId=95796:objectType=commentNew comment by rozzinI'm confused by the "only certify the identity of goodguys, never of badguys" mentality; don't we WANT #<span class="tag"><a href="https://status.hackerposse.com/tag/badguys" rel="tag">badguys</a></span> to be reliably recognizable?http://activitystrea.ms/schema/1.0/post2016-03-24T14:15:25+00:002016-03-24T14:15:25+00:00http://activitystrea.ms/schema/1.0/personhttp://status.hackerposse.com/user/1rozzinRobotanist, FOSS engineer, artist w/ a superhuman ability to distinguish shades of khaki. FoxtrotGPS, libvisualid, GNU Robots maintainer.42.76537 -71.46757rozzinJoshua Judson RosenRobotanist, FOSS engineer, artist w/ a superhuman ability to distinguish shades of khaki. FoxtrotGPS, libvisualid, GNU Robots maintainer.Nashua, New Hampshire, USAhomepagehttp://www.hackerposse.com/~rozzintruetag:status.hackerposse.com,2016-03-23:noticeId=95724:objectType=thread:crc32=ad10f5f2http://activitystrea.ms/schema/1.0/commenttag:status.hackerposse.com,2016-03-24:noticeId=95795:objectType=commentNew comment by rozzin... or maybe she thought that "Joshua Judson Rosen" might be a #<span class="tag"><a href="https://status.hackerposse.com/tag/codename" rel="tag">codename</a></span> shared by / recycled across multiple people? Like "James Bond"?http://activitystrea.ms/schema/1.0/post2016-03-24T13:59:11+00:002016-03-24T13:59:11+00:00http://activitystrea.ms/schema/1.0/personhttp://status.hackerposse.com/user/1rozzinRobotanist, FOSS engineer, artist w/ a superhuman ability to distinguish shades of khaki. FoxtrotGPS, libvisualid, GNU Robots maintainer.42.76537 -71.46757rozzinJoshua Judson RosenRobotanist, FOSS engineer, artist w/ a superhuman ability to distinguish shades of khaki. FoxtrotGPS, libvisualid, GNU Robots maintainer.Nashua, New Hampshire, USAhomepagehttp://www.hackerposse.com/~rozzintruetag:status.hackerposse.com,2016-03-23:noticeId=95724:objectType=thread:crc32=ad10f5f2http://activitystrea.ms/schema/1.0/commenttag:status.hackerposse.com,2016-03-23:noticeId=95766:objectType=commentNew comment by rozzinI do wonder if there was at least any cogence in the "I don't sign spooks' keys" thought: maybe she thought that, as a G-man, I'd have the resources+will to compromise someone else's e-mail and impersonate them?http://activitystrea.ms/schema/1.0/post2016-03-23T23:06:10+00:002016-03-23T23:06:10+00:00http://activitystrea.ms/schema/1.0/personhttp://status.hackerposse.com/user/1rozzinRobotanist, FOSS engineer, artist w/ a superhuman ability to distinguish shades of khaki. FoxtrotGPS, libvisualid, GNU Robots maintainer.42.76537 -71.46757rozzinJoshua Judson RosenRobotanist, FOSS engineer, artist w/ a superhuman ability to distinguish shades of khaki. FoxtrotGPS, libvisualid, GNU Robots maintainer.Nashua, New Hampshire, USAhomepagehttp://www.hackerposse.com/~rozzintruetag:status.hackerposse.com,2016-03-23:noticeId=95724:objectType=thread:crc32=ad10f5f2http://activitystrea.ms/schema/1.0/notetag:status.hackerposse.com,2016-03-23:noticeId=95724:objectType=noteNew note by rozzinMet a bunch of awesome people at #<span class="tag"><a href="http://status.hackerposse.com/tag/lp2016" rel="tag">lp2016.</a></span> And few... #<span class="tag"><a href="http://status.hackerposse.com/tag/interesting" rel="tag">interesting</a></span> ones. Like the one who refused to sign my #<span class="tag"><a href="http://status.hackerposse.com/tag/pgp" rel="tag">PGP</a></span> key because she thought I was a government spook... because I claimed to be from #<span class="tag"><a href="http://status.hackerposse.com/tag/nh" rel="tag">NH</a></span> but "didn't know that *every* FreeStater is (obviously) #<span class="tag"><a href="http://status.hackerposse.com/tag/crypto" rel="tag">crypto</a></span> savvy enough to sign PGP keys... since most of them use #<span class="tag"><a href="http://status.hackerposse.com/tag/bitcoin" rel="tag">bitcoin</a></span> as their only currency... so they can remain anonymous". #<span class="tag"><a href="http://status.hackerposse.com/tag/wtf" rel="tag">wtf</a></span> #<span class="tag"><a href="http://status.hackerposse.com/tag/notevenwrong" rel="tag">notevenwrong</a></span>http://activitystrea.ms/schema/1.0/post2016-03-23T03:17:35+00:002016-03-23T03:17:35+00:00http://activitystrea.ms/schema/1.0/personhttp://status.hackerposse.com/user/1rozzinRobotanist, FOSS engineer, artist w/ a superhuman ability to distinguish shades of khaki. FoxtrotGPS, libvisualid, GNU Robots maintainer.42.76537 -71.46757rozzinJoshua Judson RosenRobotanist, FOSS engineer, artist w/ a superhuman ability to distinguish shades of khaki. FoxtrotGPS, libvisualid, GNU Robots maintainer.Nashua, New Hampshire, USAhomepagehttp://www.hackerposse.com/~rozzintruetag:status.hackerposse.com,2016-03-23:noticeId=95724:objectType=thread:crc32=ad10f5f2