log☇︎
2100+ entries in 0.837s
penguirker: New blog post: http://contravex.com/2014/09/23/please-to-pgp-guide-for-linux-os-x-windows/
assbot: Please To PGP (Guide for Linux, OS X, Windows) | Contravex: A blog by Pete Dushenski
pete_dushenski: http://contravex.com/2014/09/23/please-to-pgp-guide-for-linux-os-x-windows/ << linux users: feel free to let me know if i missed or botched something!
mircea_popescu: so now you do ;;eregister [username] [pgp key LONG ID]
assbot: Contact : PGP pe Trilema - Un blog de Mircea Popescu.
mircea_popescu: i see you hav the public key published, but something like http://trilema.com/contact-pgp/ is better practice
julia_: ive had that for a while, i didn;t know this part "pgp is the standard. gpg is the gnu implementation thereof." thanks
julia_: so my pgp sig is what you're talking about?
mircea_popescu: exactly the same thing. pgp is the standard. gpg is the gnu implementation thereof.
julia_: i have a PGP key, that's different ye?
ContingencyPlan: thanks for the up - does anyone have a link for getting started with PGP/WoT?
BingoBoingo: !up pgp
nubbins`: probably the wrong crowd around for this, but any interest in a 2012-funded 25btc casascius coin w/ pgp docs?
mircea_popescu: yes command line pgp. who is this fuckwit.
punkman: http://sourceforge.net/p/enigmail/forum/support/thread/3e7268a4/ "Still as a computer scientist I need an answer to which system I will teach in my class next week. Command-line PGP ?!?"
bitstein: More usability nonsense. Trusted servers are soooo much better than PGP, right? http://www.wired.com/2014/09/oxguard/
asciilifeform: BingoBoingo: every usg fiefdom, large and small, has own fake pgp.
MolokoDesk: there's probably an includable object in php that does PGP operations that doesn't use the command line. some PGP or GPG library wrapper.
MolokoDesk: the only thing i haven't tested fully is spending via block.io's api (i have the encoded wallet address already), and getting PGP keys or key IDs/hashes from a signed document without knowing the public keys already.
assbot: $ gpg -v -v gpg: Go ahead and type your message ... -----BEGIN PGP SIGNED MESS - Pastebin.com
mircea_popescu: asciilifeform why is the pgp corp named twice in the rfc ?
asciilifeform: MolokoDeck: please, absolutely must, take the time to understand how pgp actually works.
ben_vulpes: but in the case of an unknown key, pgp cannot determine if a signature is valid.
MolokoDeck: you need the hash of the public key ... to get that it seems you need the public key. the PGP cryptosignatures on a document are kind of opaque if you don't have the public key already, apparently it uses the public key to determine whether the signatures match the unaltered document and are from the person who owns the private key matching the public key.
assbot: Schneier on Security: The Problems with PGP
eightyeight: mircea_popescu: i saw your comment on my blog re: my retort to dr. green on his assesment about pgp
assbot: PGP trust paths : Aaron Toponce -> Mircea Popescu
mircea_popescu: also i dunno if you know http://pgp.cs.uu.nl/mk_path.cgi?FROM=8086060F&TO=2FB7B452&PATHS=Find+Trust+Paths+To+Me
assbot: Aaron Toponce : PGP Keysigning Policy
eightyeight: my keysigning policy, which i'm looking at ammending: https://pthree.org/my-pgp-key-signing-policy/
danielpbarron: i just invited another guy; he wrote a blog post as a rebuttal to that "PGP should die" thing
kakobrekla: they dont teach pgp in cs?
asciilifeform talked two chaps who were previously innocent of pgp and (mostly) of irc through the whole shebang. it took - minutes.
assbot: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Future Delivery Contract Fo - Pastebin.com
assbot: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Future Delivery Contract Fo - Pastebin.com
danielpbarron: ya, just type it up and clearsign it with your PGP key; get the other guy to sign that
assbot: MIT PGP Key Server
danielpbarron: i just uploaded your key to http://pgp.mit.edu/
assbot: Schneier on Security: The Problems with PGP
mircea_popescu: ben_vulpes VAN doesn't recognize that keyid. Please try again with the shortform of your GPG/PGP keyid. << now wouldn't it be saner if you just took the last 8 ?
TheNewDeal: but MP, don't you remember the cyperpunks thought up PGP before it was implemented?!?!
TomServo: Pff. Schneier says "Matthew Green has a good post on what's wrong with PGP and what should be done about it." (with link of course)
mircea_popescu: sadly the guy has a bitcoin address as a coinbase wallet and a pgp but no wot. wtf.
danielpbarron: do you have a PGP key?
assbot: PGP/GPG Guide | Bingo Blog
mircea_popescu: just use a htmlform pgp drop and a published key.
assbot: Aaron Toponce : What's The Matter With PGP?
pankkake: https://pthree.org/2014/08/18/whats-the-matter-with-pgp/
danielpbarron: 12:23 <+usagi> pgp keys do not shield you against legal action by the government << maybe you are a tomato
usagi: pgp keys do not shield you against legal action by the government
danielpbarron: did GLBSE use PGP keys for authentication?
assbot: 520 results for 'pgp' : http://search.bitcoin-assets.com/?q=pgp
TheNewDeal: !s pgp
mircea_popescu: asciilifeform re gpg clunk (not to be confused with pgp issues) : "MolokoDeck : for some reason gpg returns the useful info about the status of a signature verify via the error channel."
mircea_popescu: asciilifeform let me put it some other way. wouldn't you expect that if mp is conversant in pgp, so would be obama ?
asciilifeform: still boggling mind at the newest pgp hatchet job. why the idiocy? or rather, why was it not cushioned in perfectly logical criticism of the spec (crufty; mandates support for hideously weak algos; etc) ?
pete_dushenski: "If the NSA is your adversary just forget about PGP." << fucking golden
assbot: A Few Thoughts on Cryptographic Engineering: What's the matter with PGP?
pete_dushenski: also http://blog.cryptographyengineering.com/2014/08/whats-matter-with-pgp.html?m=1
assbot: certificate transparency for PGP? | discrete blogarithm
pete_dushenski: https://zyan.scripts.mit.edu/blog/certificate-transparency-for-pgp/
decimation: "what part is complex [of pgp]" << when I do a gpg --list-packets --verbose < pubkey I find much that I desire to be documented
asciilifeform: mircea_popescu: veterans just neatly paste the pgp in the email body << wait, vs. what ?
mircea_popescu: "(Let's not get into the NSA's collect-it-all policy for encrypted messages. If the NSA is your adversary just forget about PGP.)" << best part :D
decimation: I would agree with his point that the pgp protocol is complex, but I suspect that anything that tries to solve the same problems will have similar complexity
mircea_popescu: "The lack of transparent key management in PGP isn't unfixable. For those who don't trust Google or Yahoo, there are experimental systems like Keybase.io that attempt to tie keys to user identities."
mircea_popescu: by now i can sorta distinguish the noobs from the veterans because the noobs send me gpg blobs with "Content-Type: multipart/mixed;" mixed in, whereas the veterans just neatly paste the pgp in the email body. ☟︎
mircea_popescu: BingoBoingo it's so lulzy, the crap these people publish. "o i hate pgp, it's too secure, pls to use centrally distributed keys, so much lightyears better"
assbot: 40 results for 'with PGP' : http://search.bitcoin-assets.com/?q=with+PGP
ben_vulpes: !s with PGP
assbot: certificate transparency for PGP? | discrete blogarithm
BingoBoingo: And a follow up talking around problems https://zyan.scripts.mit.edu/blog/certificate-transparency-for-pgp/
mircea_popescu: "It's time for PGP to die. " sez author.
assbot: A Few Thoughts on Cryptographic Engineering: What's the matter with PGP?
mircea_popescu: asciilifeform and here's one for you : http://blog.cryptographyengineering.com/2014/08/whats-matter-with-pgp.html jeez im on a roll today.
justusranvier: I lost the password forum account, and don't have the email it was linked to any more. I may have an archived PGP key around somewhere that was linked to it though.
assbot: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Future Delivery Contract Fo - Pastebin.com
asciilifeform: re: the pgp piece << classic hatchet job ☟︎
TomServo: "It's time for PGP to die."
assbot: A Few Thoughts on Cryptographic Engineering: What's the matter with PGP?
TomServo: I'm sure you guys will love this one: http://blog.cryptographyengineering.com/2014/08/whats-matter-with-pgp.html
BingoBoingo: The footnote 334 PGP (Pretty Good Privacy) was released in 1991 by Phil Zimmermann, see: Cypher Wars from Wired
BingoBoingo: mircea_popescu: PGP appears once, in a footnote in his second PDF, GPG appears not at all
mircea_popescu: "cypherpunks" didn't "build pgp"
TimSwanson: They built really cool tech like PGP or even Digicash and ZKS but couldn't find a target market in a profitable manner
jdanks: somebody gave me voice. i have no pgp keys or nothing. name is john
jdanks: I've created PGP keys for stuff before not knowing what I was doing. I love all your posts mircea. you are a good man, standing up to bad peoples and finding who's trully trustworthy (:
wyrdmantis: they can't stole my btc with my pgp key, so i fell safe for now
wyrdmantis: so it's too late? the pgp i've created is fucking short
chetty: changing pgp keys is messy, make a good one to start with
wyrdmantis: can i change pgp key later?
nubbins`: besides, pgp is useful. you'll be glad you learned
thestringpuller: +pete_dushenski> ;;later tell ben_vulpes please to fix van pgp so thestringpuller can advertise his muffins << you're a bully
pete_dushenski: ;;later tell ben_vulpes please to fix van pgp so thestringpuller can advertise his muffins
Jason: mircea_popescu: got it. what format can i expect new deeds to be in? pgp clearsigned? pgp encrypted?
assbot: -----BEGIN PGP MESSAGE----- Version: GnuPG v1 hQIMA8bZzs4WuOMuAQ//Ubt51b+eFkRkU - Pastebin.com
assbot: -----BEGIN PGP MESSAGE----- Version: GnuPG v1.4.10 (GNU/Linux) hQIMA/tsnDpeq - Pastebin.com
Jason: so i'm still not entirely sure what i just saw happen. you sent it a pgp message, and it responded with a different pgp message.
mircea_popescu: given me back a pgp message.
assbot: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Future Delivery Contract Fo - Pastebin.com