Re: The Presidential Commission

2013-12-20 Thread Robert J. Hansen
> How major is this? The intelligence agencies seem to be out of control, > not only in the US. I just read this as "they are not allowed to OPENLY > weaken encryption standards and if we catch them someone may be scapegoated". The President's commission on the NSA was expected to give a whitewash

"resource limit"

2013-12-20 Thread a k'wala
Symptom: In Ubuntu 13.10, 'apt-get update' has started showing several warnings like the following, even though the keys are present: W: GPG error: http://us.archive.ubuntu.com saucy Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 40976EAF43

Re: The Presidential Commission

2013-12-20 Thread Johan Wevers
On 20-12-2013 16:03, Robert J. Hansen wrote: > There has been a major development in the U.S. regarding government > surveillance. Y'all might enjoy reading the following link. > > http://www.washingtontimes.com/news/2013/dec/19/white-house-says-its-open-45-panels-proposed-46-ns/ > > Notably fo

Matching campaign over

2013-12-20 Thread Robert J. Hansen
Given that we've already reached my maximum matching, I'm closing things out a little early. Thanks to everyone who contributed and forced me to open my wallet. :) Should anyone have any doubts, please contact Werner off-list; he'll be able to confirm receipt of this donation. _

Re: Import "Raw" RSA Secret Key?

2013-12-20 Thread Daniel Kahn Gillmor
On 12/20/2013 03:20 PM, Micah Lee wrote: > On 12/20/2013 08:21 AM, Eric Swanson wrote: >> This is exactly what I was looking for. Thanks! > > There's a script called keytrans (with a symblink called pem2openpgp) > that's bundled with the monkeysphere source code might do exactly what > you need. >

Re: [Announce] GnuPG launches crowdfunding campaign

2013-12-20 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Thursday 19 December 2013 at 6:00:47 PM, in , Werner Koch wrote: > A reason might be that they have concerns publishing a > translation if not done by lawyer. However, the > half-translated TOS would contradict this assumption. I shouldn't

Re: Import "Raw" RSA Secret Key?

2013-12-20 Thread Micah Lee
On 12/20/2013 08:21 AM, Eric Swanson wrote: > This is exactly what I was looking for. Thanks! There's a script called keytrans (with a symblink called pem2openpgp) that's bundled with the monkeysphere source code might do exactly what you need. apt-get source monkeyspherecd monkeysphere-0.36/src/

Re: Import "Raw" RSA Secret Key?

2013-12-20 Thread Eric Swanson
On 12/19/2013 09:28 PM, David Shaw wrote: > On Dec 19, 2013, at 7:10 PM, Eric Swanson wrote: > >> I'm trying to import a "raw" RSA secret key into GnuPG. >> >> I have p, q, d and the creation timestamp, as well as anything else >> that can be computed from them (n, u, e, etc etc). >> >> I've been

Re: Holiday giving

2013-12-20 Thread Werner Koch
On Fri, 20 Dec 2013 00:07, r...@sixdemonbag.org said: > Werner is free to tell the list how many funds were raised, how many I 247 Euro from Dec 7 to 18. 514 Euro the last two days; obviously as a side effect of the Goteo campaign. That are the raw Paypal numbers. > request he keep my (private

Re: What is the latest version

2013-12-20 Thread Robert J. Hansen
According to the raw source of your message, you are running: "User-Agent: Mozilla/5.0 (X11; Linux i686; rv:24.0) Gecko/20100101 Thunderbird/24.2.0" User-Agent strings lie. :) Take a look at the original message. In the OpenPGP signature there was a comment block identifying it as having b

The Presidential Commission

2013-12-20 Thread Robert J. Hansen
There has been a major development in the U.S. regarding government surveillance. Y'all might enjoy reading the following link. http://www.washingtontimes.com/news/2013/dec/19/white-house-says-its-open-45-panels-proposed-46-ns/ Notably for us (but not mentioned in the news article), the commi

Re: Holiday giving

2013-12-20 Thread Werner Koch
On Thu, 19 Dec 2013 21:39, pe...@digitalbrains.com said: > PS: By the way, why does goteo.org insist on speaking what looks like Spanish > to > me? I intended to read the privacy policy, but it insisted on showing me Right, there is no transaltion. This has been reported by several contributors

Re: [Announce] GnuPG launches crowdfunding campaign

2013-12-20 Thread Mark H. Wood
On Thu, Dec 19, 2013 at 06:38:30PM +0100, Julian H. Stacey wrote: > Johannes Zarl wrote: > > Hi, > > > > Maybe my English is a little rusty, but what exactly is a "spanking server"? > > Presumably a contraction from "brand spanking new" a phrase normal > & common in England when I grew up there.

Re: [Announce] GnuPG launches crowdfunding campaign

2013-12-20 Thread Christophe Brocas
Le 20/12/2013 13:28, Peter Lebbing a écrit : > On 20/12/13 12:08, Sam Tuke wrote: >> Yes we've reached 109% of the minimum goal - thanks to everyone who >> contributed >> for your support! > 111% of optimum now: EUR 24.151! In slightly more than a day. Congratulations! > > Very cool. > > Peter. >

Re: [Announce] GnuPG launches crowdfunding campaign

2013-12-20 Thread Peter Lebbing
On 20/12/13 12:08, Sam Tuke wrote: > Yes we've reached 109% of the minimum goal - thanks to everyone who > contributed > for your support! 111% of optimum now: EUR 24.151! In slightly more than a day. Congratulations! Very cool. Peter. -- I use the GNU Privacy Guard (GnuPG) in combination wit

Re: [Announce] GnuPG launches crowdfunding campaign

2013-12-20 Thread Sam Tuke
Yes we've reached 109% of the minimum goal - thanks to everyone who contributed for your support! Sam. Christophe Brocas wrote: >Le 19/12/2013 11:08, Werner Koch a écrit : >> GnuPG encryption project launches crowdfunding campaign >> >> Today GNU Privacy Guard (GnuPG) has launched its first cr

Re: gpg-rsa-key decryption with a mobile

2013-12-20 Thread Peter Lebbing
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 20/12/13 10:28, Mike Cardwell wrote: > I have a V2 OpenPGP SmartCard. I'm wondering if this would be vulnerable to > the attack in question? Also, what about the Crypto Stick? Presumably these > generate the same sort of noise during signing/decrypt

Re: gpg-rsa-key decryption with a mobile

2013-12-20 Thread Mike Cardwell
* on the Thu, Dec 19, 2013 at 07:03:57PM +0100, Werner Koch wrote: >> Since you are mentioned in this webpage, do you know by any chance >> whether gpgsm is vulnerable in a similar way? > > gpgsm uses Libgcrypt and Libgcrypt employs RSA blinding for a long time > now. Thus it is not vulnerable.

[Announce] 0x10 years of protecting privacy

2013-12-20 Thread Werner Koch
Hi, me lacking the time to write an update of the 10 Years of GnuPG [2], Sam Tuke was kind enough to draft this: 16 Years of protecting privacy ══ Today marks 16 years since the first release of GNU Privacy Guard (GnuPG). In that time the project has grown fr

Re: gpgsm and dirmngr

2013-12-20 Thread Jens Lechtenboerger
On So, Dez 15 2013, Jens Lechtenboerger wrote: > Does dirmngr only speak LDAPv2? If I configure a LDAPv3 server, it > complains about the “historical protocol” upon bind from dirmngr. > This appears to indicate use of v2 by dirmngr. As a workaround I retrieve certificates with ldapsearch (LDAPv3

Re: [Announce] GnuPG launches crowdfunding campaign

2013-12-20 Thread Christophe Brocas
Le 19/12/2013 11:08, Werner Koch a écrit : > GnuPG encryption project launches crowdfunding campaign > > Today GNU Privacy Guard (GnuPG) has launched its first crowdfunding > campaign [1] with the aim of building a new website and long term > infrastructure. The 24.000 EUR target will fund: > > -