Skip to main content

Cerca

Elementi taggati con: openpgp


 
This week I get to play with hardware at work. That's always a bit of fun. Flashing GnuK onto these little rascals turning them into simple OpenPGP hardware keys.




The programming headers next to the chip was so small I didn't have any header pins that fit. Had to chop the legs of an LED to use as pins. They had just the right size.

\#diy #openpgp #crypto #hardware

 

Summer of Code: Command Line OX Client!


vanitasvitae writes on 2018-06-01:
As I stated earlier, I am working on a small XMPP command line test client, which is capable of sending and receiving OpenPGP encrypted messages. I just published a first version :)
Creating command line clients with Smack is super easy. You basically just create a connection, instantiate the manager classes of features you want to use and create some kind of read-execute-print-loop.
Last year I demonstrated how to create an OMEMO-capable client in 200 lines of code. The new client follows pretty much the same scheme.
The client offers some basic features like adding contacts to the roster, as well as obviously OX related features like displaying fingerprints, generation, restoration and backup of key pairs and of course encryption and decryption of messages. Note that up to this point I haven’t implemented any form of trust management. For now, my implementation considers all keys whose fingerprints are published in the metadata node as trusted.
You can find the client here. Feel free to try it out, instructions on how to build it are also found in the repository.
Happy Hacking!
#smack #ox #freesoftware #xmpp #cli #fsfe #openpgp #omemo

 

Dino in Debian experimental



What is Dino?



Dino is a modern IM client using XMPP (Jabber) with support for both OpenPGP and OMEMO. It looks very nice and can already be used for chatting and group conversations. It is, however, not yet stable nor feature-complete. If you are looking for something like Conversations (Android XMPP client), but for the desktop, Dino is for you. If you like to have something more stable and feature-complete, try Gajim instead. I use both! :~)





Dino is written in C and Vala, uses the GTK+ UI toolkit and looks best in Gnome, XFCE, or other GTK+ based desktops. I heard about planned versions for Windows and MacOS, too, but don't hold your breath.

How to install Dino on Debian?



Since yesterday, the Dino IM client is available in the official Debian repositories, but so far only in the "experimental" distribution. To install it, Debian users have to:
$ echo deb [url=https://deb.debian.org/debian/]https://deb.debian.org/debian/[/url] experimental main | sudo tee /etc/apt/sources.list.d/experimental.list 
$ sudo apt update 
$ sudo apt -t experimental install dino-im 

This should work on nine official and five unofficial architectures for at least unstable and testing. Not sure about stable. I'm pretty sure, that oldstable will not work.

Why the "-im" suffix for Dino in Debian?



There used to be another program, an "integrated MIDI piano roll editor and sequencer engine", by the same name in Debian. Many references to the old program still exist, so it would be problematic to recycle the name for a different purpose.

Happy chatting!



#xmpp #debian #dino #jabber #openpgp #omemo #im #federation #chat

 

Dino in Debian experimental



What is Dino?



Dino is a modern IM client using XMPP (Jabber) with support for both OpenPGP and OMEMO. It looks very nice and can already be used for chatting and group conversations. It is, however, not yet stable nor feature-complete. If you are looking for something like Conversations (Android XMPP client), but for the desktop, Dino is for you. If you like to have something more stable and feature-complete, try Gajim instead. I use both! :~)




Dino is written in C and Vala, uses the GTK+ UI toolkit and looks best in Gnome, XFCE, or other GTK+ based desktops. I heard about planned versions for Windows and MacOS, too, but don't hold your breath.

How to install Dino on Debian?



Since yesterday, the Dino IM client is available in the official Debian repositories, but so far only in the "experimental" distribution. To install it, Debian users have to:
$ echo deb https://deb.debian.org/debian/ experimental main | sudo tee /etc/apt/sources.list.d/experimental.list
$ sudo apt update
$ sudo apt -t experimental install dino-im


This should work on nine official and five unofficial architectures for at least unstable and testing. Not sure about stable. I'm pretty sure, that oldstable will not work.

Why the "-im" suffix for Dino in Debian?



There used to be another program, an "integrated MIDI piano roll editor and sequencer engine", by the same name in Debian. Many references to the old program still exist, so it would be problematic to recycle the name for a different purpose.

Happy chatting!



#xmpp #debian #dino #jabber #openpgp #omemo #im #federation #chat

Debian Package Tracker - dino-im

Debian Package Tracker - dino-im

 
Too cool for PGP

https://www.mailpile.is/blog/2016-12-13_Too_Cool_for_PGP.html
The experts, by and large, have yet to offer any credible replacements for PGP. And when they suggest abandoning PGP, what they're really saying is we should give up on secure e-mail and just use something else. That doesn't fly. Many people have to use e-mail. E-mail is everywhere. Not improving the security of e-mail and instead expecting people to just use other tools (or go without), is the security elite proclaiming from their ivory tower: "Let them eat cake!"

Furthermore, if that "something else" also requires people use their phone number for everything... well, that's the messaging world's equivalent of the widely despised Facebook Real Name Policy. If you ever needed a clear example of why the lack of diversity (and empathy) in tech is a problem, there it is!

A very good article on just why OpenPGP is so important! From one of the main guys behind Mailpile.

#privacy #encryption #email #openpgp

Mailpile: Too Cool for PGP


 
Too cool for PGP

https://www.mailpile.is/blog/2016-12-13_Too_Cool_for_PGP.html
The experts, by and large, have yet to offer any credible replacements for PGP. And when they suggest abandoning PGP, what they're really saying is we should give up on secure e-mail and just use something else. That doesn't fly. Many people have to use e-mail. E-mail is everywhere. Not improving the security of e-mail and instead expecting people to just use other tools (or go without), is the security elite proclaiming from their ivory tower: "Let them eat cake!"

Furthermore, if that "something else" also requires people use their phone number for everything... well, that's the messaging world's equivalent of the widely despised Facebook Real Name Policy. If you ever needed a clear example of why the lack of diversity (and empathy) in tech is a problem, there it is!

A very good article on just why OpenPGP is so important! From one of the main guys behind Mailpile.

#privacy #encryption #email #openpgp

Mailpile: Too Cool for PGP


 

Resisting the centralization of network infrastructure



https://lwn.net/Articles/697398/ Keynote by Mr GnuPG Werner Koch at GUADEC 2016:
Today, the new attempt is Keybase.io, which many users like for its convenience (linking PGP keys to social media accounts). But it fundamentally violates the end-to-end privacy principle of PGP by binding keys to privacy-invading services. Periodically, he said, proposals pop up to implement "validating" PGP keyservers—but none of them work in a decentralized fashion. He urged users to stand up against all attempts to centralize PGP.

Finally, he looked at federation in general. Mail servers have more and more difficulty interoperating, he said, and XMPP has "lost its track" and is being replaced by centralized systems like WhatsApp and Signal. He encouraged developers to make federation a priority and to design for it from the beginning.

Note: If you are not subscribed to LWN, you cannot yet read the article, but it will be open in one week. Be patient, the article is worth it. Or subscribe to LWN, they deserve more subscribers!

#decentralization #federation #gnupg #openpgp #xmpp #signal #keybase #keybaseio

 
#OpenPGP #GnuPG #GPG