Re: wanted: educate us please on key dongles

2017-08-02 Thread Jonas Smedegaard
Quoting Adam Borowski (2017-08-02 16:16:29) > There are docs available on the interwebs, but: > 21:22 < lamby> The concept of following random docs/commands on the web in >order to get a "super secure" key makes me smie :) Ah - enlightening: I always wondered what a smiey looked li

Re: vPro and secure Debian systems

2017-08-02 Thread Zlatan Todoric
On 08/02/2017 10:24 AM, Daniel Pocock wrote: Hi all, There is a page[1] about AMT / vPro on the wiki, it doesn't mention any of the security concerns[2] about this technology. Is there anything that Debian can do as an OS (e.g. default settings, check during installation) to protect users fro

Re: Need Info : MIPS 64 ( big Endian) debian libraries

2017-08-02 Thread Christian Seiler
On 08/02/2017 10:10 PM, Paul Wise wrote: > On Wed, Aug 2, 2017 at 3:44 PM, Christian Seiler wrote: > >> Unfortunately Debian only supports MIPS64 in the Little Endian >> variant. There isn't even an unofficial port to the Big Endian >> variant of MIPS64 that I'm aware of. Big Endian MIPS is only >

Re: wanted: educate us please on key dongles

2017-08-02 Thread Zlatan Todoric
On 08/02/2017 10:16 PM, Adam Borowski wrote: Hi! Continuing from IRC: It would be nice if someone knowledgeable could educate the rest of us about physical key dongles -- a number of DDs/DMs/contributors still keep their secret keys on a regular disk, and could use a primer. Me included. I do

Re: rm ~/.gnupg/secring NOW!

2017-08-02 Thread Adam Borowski
On Wed, Aug 02, 2017 at 09:53:27PM +0200, Adam Borowski wrote: > If you have ever generated or imported a gpg secret key using gpg 1 or 2.0 > (ie, before Stretch), then used --delete-secret-key, please > rm ~/.gnupg/secring.gpg Obviously, this assumes you did run a gpg command after upgrading from

Need Info : MIPS 64 ( big Endian) debian libraries

2017-08-02 Thread Praveen Gandala
Hi, We are looking for MIPS 64 ( Big Endian) Debian libraries. I would be grateful if you could share the information on where I can find them Thanks & Regards Praveen

wanted: educate us please on key dongles

2017-08-02 Thread Adam Borowski
Hi! Continuing from IRC: It would be nice if someone knowledgeable could educate the rest of us about physical key dongles -- a number of DDs/DMs/contributors still keep their secret keys on a regular disk, and could use a primer. Me included. I do have a backup key with plenty of sigs that's sto

Re: vPro and secure Debian systems

2017-08-02 Thread Holger Levsen
On Wed, Aug 02, 2017 at 09:24:41AM +0100, Daniel Pocock wrote: > For people who have a computer or laptop with vPro capabilities, can it > be made secure or are they better off getting rid of that system? modern intel CPUs also support CPU-"debugging" via USB… fun fun fun. epoxy and glitter can

Re: Need Info : MIPS 64 ( big Endian) debian libraries

2017-08-02 Thread Paul Wise
On Wed, Aug 2, 2017 at 3:44 PM, Christian Seiler wrote: > Unfortunately Debian only supports MIPS64 in the Little Endian > variant. There isn't even an unofficial port to the Big Endian > variant of MIPS64 that I'm aware of. Big Endian MIPS is only > supported in the 32bit variant. Actually there

rm ~/.gnupg/secring NOW!

2017-08-02 Thread Adam Borowski
Hi guys! Heads up: If you have ever generated or imported a gpg secret key using gpg 1 or 2.0 (ie, before Stretch), then used --delete-secret-key, please rm ~/.gnupg/secring.gpg (and shred/trim/balance/etc -- it's a huge topic). If you --delete-secret-key with gpg 2.1, it deletes the key only fro

Re: Need Info : MIPS 64 ( big Endian) debian libraries

2017-08-02 Thread Christian Seiler
Hi, On 08/02/2017 06:38 PM, Praveen Gandala wrote: > We are looking for MIPS 64 ( Big Endian) Debian libraries. > > I would be grateful if you could share the information on where I can > find them Unfortunately Debian only supports MIPS64 in the Little Endian variant. There isn't even an unoffi

Need Info : MIPS 64 ( big Endian) debian libraries

2017-08-02 Thread Praveen Gandala
Hi, We are looking for MIPS 64 ( Big Endian) Debian libraries. I would be grateful if you could share the information on where I can find them Thanks & Regards Praveen

vPro and secure Debian systems

2017-08-02 Thread Daniel Pocock
Hi all, There is a page[1] about AMT / vPro on the wiki, it doesn't mention any of the security concerns[2] about this technology. Is there anything that Debian can do as an OS (e.g. default settings, check during installation) to protect users from risks associated with vPro? For people who ha