From d212e860123966c3d3bd12eb4c04900c49a11cd9 Mon Sep 17 00:00:00 2001 From: nopeitsnothing Date: Fri, 3 Oct 2025 15:43:16 -0400 Subject: [PATCH] chore(crypto): remove than/nope signed canary I will no longer include my canary here, please see: https://itsnothing.net/crypto.txt and https://itsnothing.net/pgp.txt Signed-off-by: nopeitsnothing --- pgp/core-devs/README.md | 45 +++++++++--------- pgp/core-devs/than/than-canary.txt | 76 ------------------------------ pgp/core-devs/than/than-crypto.txt | 68 -------------------------- 3 files changed, 23 insertions(+), 166 deletions(-) delete mode 100644 pgp/core-devs/than/than-canary.txt delete mode 100644 pgp/core-devs/than/than-crypto.txt diff --git a/pgp/core-devs/README.md b/pgp/core-devs/README.md index 3db5235..46d505f 100644 --- a/pgp/core-devs/README.md +++ b/pgp/core-devs/README.md @@ -1,22 +1,23 @@ -# Import - -``` -$ gpg --import pgp/core-devs/* -``` - -# Verify - -``` -$ gpg --verify pgp/core-devs/than/than-crypto.txt -``` - -gpg: Signature made Sat 19 Jul 2025 02:04:10 AM EDT -gpg: using EDDSA key 8B3A74890536BAD50D9376EBF1CB32F67E3302A1 -gpg: Good signature from "nopenothinghere@proton.me " [ultimate] -gpg: aka "Nope Nothing (Anonymous Planet Contact) " [ultimate] -gpg: aka "Nope Nothing (Systems Administrator) " [ultimate] -Primary key fingerprint: 8B3A 7489 0536 BAD5 0D93 76EB F1CB 32F6 7E33 02A1 - -### All signing keys are signed by the Master Signing Key - -TODO +# Import + +```bash +$ gpg --import pgp/core-devs/* +``` + +# Verify + +```bash +$ gpg --verify pgp/core-devs/than/than-crypto.txt + + +gpg: Signature made Sat 19 Jul 2025 02:04:10 AM EDT +gpg: using EDDSA key 8B3A74890536BAD50D9376EBF1CB32F67E3302A1 +gpg: Good signature from "nopenothinghere@proton.me " [ultimate] +gpg: aka "Nope Nothing (Anonymous Planet Contact) " [ultimate] +gpg: aka "Nope Nothing (Systems Administrator) " [ultimate] +Primary key fingerprint: 8B3A 7489 0536 BAD5 0D93 76EB F1CB 32F6 7E33 02A1 +``` + +## All signing keys are signed by the Master Signing Key + +TODO diff --git a/pgp/core-devs/than/than-canary.txt b/pgp/core-devs/than/than-canary.txt deleted file mode 100644 index 9bb51c6..0000000 --- a/pgp/core-devs/than/than-canary.txt +++ /dev/null @@ -1,76 +0,0 @@ ------BEGIN PGP SIGNED MESSAGE----- -Hash: SHA512 - -Sat Jul 19 02:03:40 AM EDT 2025 - -CEH v12 | (ISC)² | Linux+ | Cisco CCNA | Security+ | PenTest+ - -Owner: My blog - https://itsnothing.net. -Admin: The Hitchhiker's Guide to Online Anonymity - https://anonymousplanet.org - -Latest bitcoin block hash: -00000000000000000000b685887fe078cc9839294a91f8d38a3311864fc15418 - -I positively confirm I am in complete control of all my key material and domains. - -All previous keys have been revoked as part of standard OPSEC key rotation -procedures. Do NOT encrypt communications to my old keys, I will not read them. - -The key currently published on -https://keyoxide.org/8B3A74890536BAD50D9376EBF1CB32F67E3302A1 with a fingerprint -of 8B3A74890536BAD50D9376EBF1CB32F67E3302A1, is my only PGP key for public -communication. It IS published on public keyservers now. Please refrain from uploading it there -(again). Someone already broke this rule. - -Permanent record of old and new PGP keys: - -pub ed25519/0xF1CB32F67E3302A1 2024-03-29 [SC] - Key fingerprint = 8B3A 7489 0536 BAD5 0D93 76EB F1CB 32F6 7E33 02A1 -uid [ultimate] nopenothinghere@proton.me - -To fetch the full key, you can simply do: - - gpg --keyserver keys.openpgp.org --recv-key 0xF1CB32F67E3302A1 - -** - Note: this keyserver is experimental.[0] I still have yet to add these keys - to the I2P keyserver pool, and I don't know if I will. If you have previously - signed my key but did a local-only signature (lsign), you will not want to - issue the following, instead you will want to use --lsign-key, and not send - the signatures to the keyserver. -** - - gpg --sign-key 0xF1CB32F67E3302A1 - -I'd like to receive your signatures on my key. You can either send me an e-mail -with the new signatures (if you have a functional MTA on your system): - - gpg --export 0xF1CB32F67E3302A1 | gpg --encrypt -r 0xF1CB32F67E3302A1 --armor \ - | mail -s 'OpenPGP Signatures' - -Additionally, I highly recommend that you implement a mechanism to keep your key -material up-to-date so that you obtain the latest revocations, and other updates -in a timely manner. You can do regular key updates by using parcimonie[1] to -refresh your keyring. Parcimonie is a daemon that slowly refreshes your keyring -from a keyserver over Tor. It uses a randomized sleep, and fresh tor circuits -for each key. The purpose is to make it hard for an attacker to correlate the -key updates with your keyring. - -I also highly recommend checking out the excellent Riseup GPG best practices -doc, from which I stole most of the text for this transition message ;-) - -https://riseup.net/en/security/message-security/openpgp/gpg-keys - -Please let me know if you have any questions on how to verify. - - Nope (Anonymous Planet) - -0. https://gist.github.com/rjhansen/67ab921ffb4084c865b3618d6955275f -1. https://directory.fsf.org/wiki/Parcimonie ------BEGIN PGP SIGNATURE----- - -iHUEARYKAB0WIQSLOnSJBTa61Q2TduvxyzL2fjMCoQUCaHs1WgAKCRDxyzL2fjMC -odrwAPsFcupXWVRha5k2BOZUvjg+nY27IG+5XM8w+IupueHVcAD7BL7MFWuJ11lb -Bqk3pSyp6hTxlSJ1lnItXwQYnGBL6AE= -=NQBO ------END PGP SIGNATURE----- diff --git a/pgp/core-devs/than/than-crypto.txt b/pgp/core-devs/than/than-crypto.txt deleted file mode 100644 index bfd9af4..0000000 --- a/pgp/core-devs/than/than-crypto.txt +++ /dev/null @@ -1,68 +0,0 @@ ------BEGIN PGP SIGNED MESSAGE----- -Hash: SHA512 - -This is a signed summary of relevant cryptographic information for nopenothinghere. -The latest version of this file is always located at: - https://itsnothing.net/crypto.txt - -This information is current as of Sat Jul 19 02:11:11 AM EDT 2025. - -Contact -======= - -email: contact@anonymousplanet.org -web: https://itsnothing.net/ -irc: <{ long live relay chat! }> -matrix: <{ violently nuked from orbit }> -xmpp: <{ n/a }> - - -OpenPGP key -=========== - -pub ed25519/0xF1CB32F67E3302A1 2024-03-29 [SC] - Key fingerprint = 8B3A 7489 0536 BAD5 0D93 76EB F1CB 32F6 7E33 02A1 -uid [ultimate] nopenothinghere@proton.me -uid [ultimate] Nope Nothing (Anonymous Planet Contact) -uid [ultimate] Nope Nothing (Systems Administrator) -ssb cv25519/0x7F02B7DB19EAA7A0 2024-03-29 [E] - -The latest up to date key including signatures can be found at: - https://itsnothing.net/pgp.txt - -A positive identification of my alive status: - https://itsnothing.net/canary.txt - - -OTR fingerprints -================ - -(N/A) I no longer use Off the Record messaging. No FPs available. - - -Olm/Megolm matrix fingerprints (outdated) -========================================= - -@thehidden:tchncs.de CAKLUZIQFD 7fcn tb81 KPCH 3h4U KJvy L4H4 Zl+l khXs Fn6e O+FV DN4 -@t:netrunner-vault.de KBJYGSJBXJ 2x5P 4CAu hWyp 5L7e tDPE tbpw w0Ii Q3/l HDrI fdP+ w3E -@thehidden:tchncs.de BYODXXYSCL drPJ 4Vyl aze1 hTRt 3FhZ WnoL eoDm CZbv bBh3 uEQd Dog -@thehidden:tchncs.de PGNRTYGHKG C2Px juxp 9Jx1 k03X uHPs uEx4 WUcB AJxV ZUMf IhVp dc0 -@thehidden:tchncs.de RQTTASEWUR xzJD 899S znyU xIId uwjR GI3e lvkh fQ98 tIMO HXwu t3o -@thehidden:tchncs.de ZWJXVXSCCL gn4L Hrlf lelw WutP Jtw7 pWRa /rcg D7eN I4Q4 j/nR 1OQ - -OMEMO fingerprints (outdated) -============================= - -sharptail@disroot.org/1302208566 42F72634 2D419951 E04BCF02 9E17B0C9 DFE073C0 97E16167 0972EEC3 05FDF262 - -Session fingerprint -=================== - -053686ab7bbb2287dee2d9c1a87518ccc5c0dae76f5aa5d0b095293700c2eb730c ------BEGIN PGP SIGNATURE----- - -iHUEARYKAB0WIQSLOnSJBTa61Q2TduvxyzL2fjMCoQUCaHs3LAAKCRDxyzL2fjMC -oY0DAQCxh0GknmrWuNL4dXOb8dPlmpi3AWTg3Gn439bp3rivEwEAnVEc+guTiOcm -gE03jaq3uSVMFWTPxx7S+XiNiwZKMQs= -=TQwt ------END PGP SIGNATURE-----