/
canary.txt
80 lines (57 loc) · 3.92 KB
/
canary.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
Canary for Kicksecure / Whonix project
----
Statements
-----------
The Kicksecure / Whonix lead developer who digitally signed this file states the following:
1. Canary issue date: see the gpg signature time.
2.
Definition "artifact": Kicksecure / Whonix software, Kicksecure / Whonix downloads, Kicksecure / Whonix source code
* The Kicksecure / Whonix Project has never added any backdoor to any artifact.
* The Kicksecure / Whonix Project has never turned over any signing key.
* The Kicksecure / Whonix Project has never knowingly signed any artifact containing any backdoor.
* The Kicksecure / Whonix Project has never weakened, compromised, or subverted any of its cryptography.
3. We plan to publish the next canary statement within 4 weeks.
This file should be signed with a detached OpenPGP signature by the Kicksecure / Whonix lead developer.
Do not trust the contents of this file blindly - always verify digital signatures!
Take special note if this message ceases to exist.
Special announcements
---------------------
None.
Disclaimers and notes
---------------------
Be mindful that Kicksecure / Whonix has been designed under the assumption that all relevant infrastructure is permanently compromised. This means NO trust is placed in any of the servers or services which host or provide any Whonix-related data, particularly software updates, source code repositories, and Kicksecure / Whonix downloads.
This canary scheme is not infallible. Signing the declaration makes it very difficult for a third party to produce arbitrary declarations, but this does not prevent the use of coercion, blackmail, compromise of the signer's laptop or other measures to produce false declarations.
The news feeds quoted below (see Proof of freshness) confirm this canary could not have been created earlier than the issue date. This demonstrates a series of canaries was not created in advance.
This declaration is provided without any guarantee or warranty. It is not legally binding upon any parties in any form. The signer should never be held legally responsible for any statements made here.
Proof of freshness
-------------------
$ date -R -u
Sat, 04 May 2024 14:06:30 +0000
$ rsstail -1 -n5 -u https://www.spiegel.de/international/index.rss
Title: Alternative for Germany (AfD): How the far-right party became the Long Arm of Russia and China
Title: Still Just a Lightweight: Germany Fails to Gain Traction with Foreign Policy
Title: The 2024 Social Design Award: Everyone Can Pitch In!
Title: Social Design Award 2024: Do It Yourself!
Title: Iran's Conflict with Israel: A Dangerous Spiral of Violence in the Middle East
$ rsstail -1 -n5 -u http://rss.cnn.com/rss/edition_world.rss
Title: Markets digest bank earnings after recent turmoil
Title: Still haven't filed your taxes? Here's what you need to know
Title: Retail spending fell in March as consumers pull back
Title: Analysis: Fox News is about to enter the true No Spin Zone
Title: Silicon Valley Bank collapse renews calls to address disparities impacting entrepreneurs of color
$ rsstail -1 -n5 -u https://feeds.bbci.co.uk/news/world/rss.xml
Title: Gaza ceasefire talks intensify in Cairo
Title: Palestinian doctor dies in Israeli prison
Title: Three arrested over Sikh activist's killing in Canada
Title: Queensland MP says she was drugged and assaulted
Title: Sweden prepares for Eurovision with heightened security
$ rsstail -1 -n5 -u https://www.theguardian.com/world/rss
Title: Bomb attacks in Congo kill at least 12 people including children
Title: Detained asylum seekers given Home Office booklet saying Rwanda is ‘generally safe’
Title: US confirms Russian forces deployed to same Niger airbase as American troops
Title: Experts condemn US tobacco firm’s sponsorship of doctor training as ‘grotesque’
Title: Russian troops enter airbase in Niger where US soldiers are stationed
$ curl --silent --fail --proto =https --tlsv1.3 https://blockchain.info/q/getblockcount
842063
$ date -u +%s
1714831601