prokop/thgtoa
1
0
Fork 0
mirror of https://github.com/Anon-Planet/thgtoa.git synced 2026-03-22 20:53:28 +01:00
Code Issues Packages Projects Releases Wiki Activity

Sign recent changes

Browse Source 
Signed-off-by: Sharp-tailed Grouse <no@anonymousplanet.org>
This commit is contained in:
Sharp-tailed Grouse
2023-04-01 05:10:34 -04:00
parent 510330d061
commit b44f4a0db7
184 changed files with 580 additions and 574 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
export/verify.html
View File

@@ -17,9 +17,9 @@
<h1 class="title">The Hitchhiker&#39;s Guide to Online Anonymity</h1>
</header>
<h2 id="how-to-check-files-for-safetyintegrity-and-authenticity">How to check files for safety/integrity and authenticity:</h2>
<p>The <strong>(currently unavailable)</strong> PDF and ODT files of this guide are cryptographically signed using GPG and <a href="https://jedisct1.github.io/minisign">Minisign</a>. Their integrity can be verified with the published SHA256 Checksum hashes on this website. SHA256 checksums of all the PDF and ODT files are available here in the <a href="sha256sum.txt">sha256sum.txt</a> file. SHA256 checksums, signatures, and VirusTotal (“VT”) checks of the releases files (containing the whole repository) are available within the latest release information at <a href="https://github.com/Anon-Planet/thgtoa/releases/latest" class="uri">https://github.com/Anon-Planet/thgtoa/releases/latest</a> which will be available as soon as we have a stable release.</p>
<p>The GPG signatures for each PDF and ODT files are available here: - <del>PDF (Light Theme) Main and Mirrors: <a href="guide.pdf.asc">guide.pdf.asc</a></del> (Currently unavailable) - <del>ODT Main and Mirrors: <a href="guide.odt.asc">guide.odt.asc</a></del> (Currently unavailable)</p>
<p>The Minisign signatures for each PDF and ODT files are available here: - <del>PDF (Light Theme) Main and Mirrors: <a href="guide.pdf.minisig">guide.pdf.minisig</a></del> (Currently unavailable) - <del>ODT Main and Mirrors: <a href="guide.odt.minisig">guide.odt.minisig</a></del> (Currently unavailable)</p>
<p>The PDF and ODT files of this guide are cryptographically signed using GPG and <a href="https://jedisct1.github.io/minisign">Minisign</a>. Their integrity can be verified with the published SHA256 Checksum hashes on this website. SHA256 checksums of all the PDF and ODT files are available here in the <a href="sha256sum.txt">sha256sum.txt</a> file. SHA256 checksums, signatures, and VirusTotal (“VT”) checks of the releases files (containing the whole repository) are available within the latest release information at <a href="https://github.com/Anon-Planet/thgtoa/releases/latest" class="uri">https://github.com/Anon-Planet/thgtoa/releases/latest</a> which will be available as soon as we have a stable release.</p>
<p>The GPG signatures for each PDF and ODT files are available here: - PDF (Light Theme) Main and Mirrors: <a href="guide.pdf.asc">guide.pdf.asc</a> - ODT Main and Mirrors: <a href="guide.odt.asc">guide.odt.asc</a></p>
<p>The Minisign signatures for each PDF and ODT files are available here: - PDF (Light Theme) Main and Mirrors: <a href="guide.pdf.minisig">guide.pdf.minisig</a> - ODT Main and Mirrors: <a href="guide.odt.minisig">guide.odt.minisig</a></p>
<h3 id="how-to-check-the-integrity-of-files-using-sha256-checksums">How to check the integrity of files using SHA256 checksums:</h3>
<p>First get the hash of your local file by following these steps for your OS:</p>
<p>Windows: - From a command prompt, run <code>certutil -hashfile filename.txt sha256</code> - Compare the obtained hash result of your local file to the online file’s published hash. They should match.</p>
@@ -55,7 +55,7 @@
</ul>
<h3 id="how-to-check-the-relative-safety-of-files-or-even-urls-such-as-httpsanonymousplanet.org-using-virustotal">How to check the relative safety of files or even URLs (such as https://anonymousplanet.org) using VirusTotal:</h3>
<p><strong>Note: we do not endorse VirusTotal. It should be used with extreme caution, never with any sensitive files, due to their privacy policies. Do not upload sensitive files to VirusTotal.</strong></p>
<p>Temporarily Disabled. <del>The PDF and ODT files of this guide have been checked by VT, see the links below for an example but do not trust these hashes blindly. Check the hashes match and re-upload to VT if needed: - PDF file: <a href="https://www.virustotal.com/gui/file/21dfa2f7da668156275e4ca2bc82091f347739967a278cf24a062c15a3944016?nocache=1">[VT Scan]</a> - ODT file: <a href="https://www.virustotal.com/gui/file/df8554f732dc54b530fd831548f0727934f2e03ad1518ac33061d0995eab2172?nocache=1">[VT Scan]</a></del></p>
<p>Temporarily Disabled. <del>The PDF and ODT files of this guide have been checked by VT, see the links below for an example but do not trust these hashes blindly. Check the hashes match and re-upload to VT if needed: - PDF file: <a href="https://www.virustotal.com/gui/file/649a35b370a96c02e33ea95796bd5aacd2e30f20280bf38bc62838617ceddd63?nocache=1">[VT Scan]</a> - ODT file: <a href="https://www.virustotal.com/gui/file-analysis/OGI0YTQzZGJlODE1MDhlMTA0YjlhZmUyMmU3ZDcwNmY6MTY4MDMzODM5OQ==">[VT Scan]</a></p>
<h3 id="additional-manual-safety-checks-for-the-pdf-files">Additional manual safety checks for the PDF files:</h3>
<p>For additional safety, you can always double check the PDF files using the PDFID tool which you can download at <a href="https://blog.didierstevens.com/programs/pdf-tools/" class="uri">https://blog.didierstevens.com/programs/pdf-tools/</a>. (You might be wondering: “Why should I trust a random python script?” Well, it is open-source and well-known. It is also probably a safer bet than trusting a random PDF).</p>
<p>Here are the steps:</p>