Re: managing OpenPGP cards in batch mode?

2016-05-04 Thread Robert J. Hansen
> Out of curiosity, where are these rules defined? The Free Software Foundation requires them for all FSF-sponsored mailing lists. Thou Shalt Not Advocate Proprietary Software. I wish I had a link but I don't -- I was told about this Thou Shalt Not Advocate Proprietary Software rule by a mem

Re: managing OpenPGP cards in batch mode?

2016-05-04 Thread Dashamir Hoxha
On Thu, May 5, 2016 at 1:17 AM, Pete Stephenson wrote: > On Thu, May 5, 2016 at 12:14 AM, Robert J. Hansen > wrote: > > Dashamir, this list has very few rules. I'm grateful for that, really. > > One of the few rules that must be obeyed, though, is "we will not > > advocate non-libre software or

Re: Attempted extortion of Enigmail

2016-05-04 Thread Robert J. Hansen
Paul Applegate was kind enough to point me at: https://blog.cloudflare.com/empty-ddos-threats-meet-the-armada-collective/ TL;DR version: there's no evidence these people can back up their threat with action, but they've still been making a ton of money from their victims. There are a lot of peop

Re: UK Investigatory Powers Bill

2016-05-04 Thread Julian H. Stacey
> > > This UK legislation will have impact elsewhere. Too many wind mills, too little time ;-) - The world has excess ignorant "Regulate Crypto" politicians & & civil servants paid to push laws. - National cryptography vendors, systems houses, banks etc may have more commercial interest to fun

Re: managing OpenPGP cards in batch mode?

2016-05-04 Thread Pete Stephenson
On Thu, May 5, 2016 at 12:14 AM, Robert J. Hansen wrote: > Dashamir, this list has very few rules. I'm grateful for that, really. > One of the few rules that must be obeyed, though, is "we will not > advocate non-libre software or products here". Out of curiosity, where are these rules defined?

Attempted extortion of Enigmail

2016-05-04 Thread Robert J. Hansen
I just received this at my Enigmail address. I'm posting this publicly because I side with Rudyard Kipling, who wrote: "And that is called paying the Dane-geld; But we've proved it again and again, That if once you have paid him the Dane-geld You never get rid of the Dane!

'No pinentry' error (--pinentry-mode loopback with --delete-secret-and-public-key)

2016-05-04 Thread Carola Grunwald
Hello! I need help with GnuPG 2.1.12 migrating an encryption tool from 1.4.20. I'm trying to run the --delete-secret-and-public-key command with the passphrase entered through stdin, which doesn't get activated ('delete key failed: No pinentry'). With --export-secret-keys I was successful this w

Re: UK Investigatory Powers Bill

2016-05-04 Thread Steve Karmeinsky
On Wed, May 04, 2016 at 11:15:47PM +0100, MFPA wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > On Wednesday 4 May 2016 at 6:04:55 PM, in > , keith wrote: > > Personally I almost realise that > > some of this may be > > needed and/or indeed necessary > By contrast, I am 100% certain th

Re: Hundreds of RSA keys factored

2016-05-04 Thread Robert J. Hansen
> There is this scary project listing several hundreds factored pgp/rsa > keys: http://trilema.com/2016/the-phuctoring/ Not scary. Not all that interesting, either. It's also been discussed on this list before. This group claims to have access to my secret key. I posted a 256-bit random sequen

Re: UK Investigatory Powers Bill

2016-05-04 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Wednesday 4 May 2016 at 6:04:55 PM, in , keith wrote: > Personally I almost realise that > some of this may be > needed and/or indeed necessary By contrast, I am 100% certain that none of it is needed. If "the authorities" think they need ac

Re: managing OpenPGP cards in batch mode?

2016-05-04 Thread Robert J. Hansen
> I do not advertise, I expess my opinion. Dashamir, this list has very few rules. I'm grateful for that, really. One of the few rules that must be obeyed, though, is "we will not advocate non-libre software or products here". If you want to host your project on GitHub, go for it! Nobody will c

Re: managing OpenPGP cards in batch mode?

2016-05-04 Thread Richard Höchenberger
On Wed, May 4, 2016 at 9:12 PM, Dashamir Hoxha wrote: > I do not advertise, I expess my opinion. Please keep you it to yourself, then. Your provocative, passive-aggressive communication style is outrageous and disrespectful. ___ Gnupg-users mailing lis

off-topic/adverstising posts (was: managing OpenPGP cards in batch mode?)

2016-05-04 Thread Werner Koch
On Wed, 4 May 2016 21:12, dashoho...@gmail.com said: > However, "e pur si muove", it still is great, the truth cannot be hidden. I asked you not to do this on this list. There are enough other ways to express OT opinions; look fur such opportunities. Please do us all a favor and stick to the n

Hundreds of RSA keys factored

2016-05-04 Thread Timo
There is this scary project listing several hundreds factored pgp/rsa keys: http://trilema.com/2016/the-phuctoring/ Quote: "This find exposes significant vulnerabilities in the OpSec practices of each and every organisation or institution mentioned. The Pirate Party, German users, something callin

Re: managing OpenPGP cards in batch mode?

2016-05-04 Thread Dashamir Hoxha
On Wed, May 4, 2016 at 3:38 PM, Werner Koch wrote: > On Wed, 4 May 2016 12:16, dashoho...@gmail.com said: > > > Git is great, GitHub is greater. > > I would appreciate if you do not advertise proprietary services here. > I do not advertise, I expess my opinion. Do you think that I am affiliated

Re: managing OpenPGP cards in batch mode?

2016-05-04 Thread Dashamir Hoxha
On Wed, May 4, 2016 at 9:12 PM, Dashamir Hoxha wrote: > On Wed, May 4, 2016 at 3:38 PM, Werner Koch wrote: > >> On Wed, 4 May 2016 12:16, dashoho...@gmail.com said: >> >> > Git is great, GitHub is greater. >> >> I would appreciate if you do not advertise proprietary services here. >> > > I do n

Re: UK Investigatory Powers Bill

2016-05-04 Thread keith
.. I should really sort out which e-mails I have a clue about.. On Wed, 2016-05-04 at 16:30 +0100, Steve Karmeinsky wrote: > On Wed, May 04, 2016 at 03:38:18PM +0100, keith wrote: > > > This UK legislation will have impact elsewhere. > > Currently encryption isn't banned, however say you encrypt

Re: UK Investigatory Powers Bill

2016-05-04 Thread Steve Karmeinsky
On Wed, May 04, 2016 at 03:38:18PM +0100, keith wrote: > This UK legislation will have impact elsewhere. Currently encryption isn't banned, however say you encrypt an email and send it to someone and the 'authorities' want to read it, they can then force you to hand over the keys and if you refus

[Announce] GnuPG 2.1.12 released

2016-05-04 Thread Werner Koch
Hello! The GnuPG team is pleased to announce the availability of a new release of GnuPG modern: Version 2.1.12. See below for new features and bug fixes. The GNU Privacy Guard (GnuPG) is a complete and free implementation of the OpenPGP standard which is commonly abbreviated as PGP. GnuPG allow

Re: [tool / utility] check-trustpaths, a command-line tool for retrieving and checking chains of signatures in the web of trust

2016-05-04 Thread Bernhard Reiter
Hi Johannes, Am Mittwoch, 4. Mai 2016 10:18:04 schrieb Johannes Nix: > https://github.com/jnxx/check-trustpaths > > I'd be happy to hear whether it is working for you > and where it can be improved. I like the idea, I'll probably try it once I have a need for the use case. Maybe you can add a lin

UK Investigatory Powers Bill

2016-05-04 Thread keith
Feel free to ignore me. As you may know the UK Government is attempting to update or otherwise consolidate its legislation in respect of access to Communications and Other Data for the purposes of law enforcement. In part that is what raised my interest in encryption and caused me to join this lis

Webpage and mailinglists overview

2016-05-04 Thread Bernhard Reiter
Hi Webmaster, just noticed that the information about our community mailinglist is a bit inconsistent. http://lists.gnupg.org/ does not list a number of relevant mailinglists like gnupg-de and gnupg-commits. I suggest to scratch the http://lists.gnupg.org/ page and redirect it to https://gnupg.

Re: managing OpenPGP cards in batch mode?

2016-05-04 Thread Werner Koch
On Wed, 4 May 2016 12:16, dashoho...@gmail.com said: > Git is great, GitHub is greater. I would appreciate if you do not advertise proprietary services here. Those who really want such a centralized service may eant to check out gitlab.com, which seems to repect user freedom better. See also h

(OT) development infrastructure

2016-05-04 Thread Peter Lebbing
On 04/05/16 12:16, Dashamir Hoxha wrote: > GitHub provides issue/project management features on top of Git. > For example it will notify me when new issues are created, when > pull requests are merged, when new releases are made, etc. Debian has its own infrastructure for that. In fact, the Git re

Re: managing OpenPGP cards in batch mode?

2016-05-04 Thread Peter Lebbing
On 04/05/16 12:22, Daniel Pocock wrote: > Given the Live CD is a clean room, isolated, will the file format > compatibility issues will be relevant? To the best of my knowledge, this would indeed not pose a problem at all. Note that exporting a private key with 2.1 prompts the user to enter the

Re: Reiner SCT cyberJack Secoder 2 / PIN pad support?

2016-05-04 Thread NIIBE Yutaka
On 05/03/2016 09:04 PM, Daniel Pocock wrote: > I've got this device with a built-in PIN pad: > > Reiner SCT cyberJack Secoder 2 / PIN pad support? > > > $ lsusb -v > ... > idVendor 0x0c4b Reiner SCT Kartensysteme GmbH > idProduct 0x0400 If I understand correctly, this dev

Re: managing OpenPGP cards in batch mode?

2016-05-04 Thread Daniel Pocock
On 04/05/16 11:55, Werner Koch wrote: > On Wed, 4 May 2016 11:40, pe...@digitalbrains.com said: > >> Werner, would you recommend they use 2.1 or 2.0 for the Debian Live CD? > > 2.1 of course > I already raised the topic of using 2.1, there is some feedback about it in the bug tracker, especi

Re: managing OpenPGP cards in batch mode?

2016-05-04 Thread Dashamir Hoxha
On Wed, May 4, 2016 at 11:37 AM, Peter Lebbing wrote: > On 03/05/16 22:31, Dashamir Hoxha wrote: > > Is it on GitHub (so that I can watch you)? > > From [1]: the project is in Git, but not on GitHub. GitHub provides issue/project management features on top of Git. For example it will notify me

Re: managing OpenPGP cards in batch mode?

2016-05-04 Thread Werner Koch
On Wed, 4 May 2016 11:40, pe...@digitalbrains.com said: > Werner, would you recommend they use 2.1 or 2.0 for the Debian Live CD? 2.1 of course Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. ___ Gnupg-user

[tool / utility] check-trustpaths, a command-line tool for retrieving and checking chains of signatures in the web of trust

2016-05-04 Thread Johannes Nix
I wrote a small tool for automatically retrieving and checking trust paths between two PGP keys. This was motivated by me experiencing difficulty when verifying signed Linux distribution images or downloads for web software using GnuPG. The PGP Pathfinder Service provided by Henk P. Penning allo

Re: managing OpenPGP cards in batch mode?

2016-05-04 Thread Peter Lebbing
On 04/05/16 08:13, Werner Koch wrote: > There is also --quick-gen-key: > > [...] > > Well, 2.1 creates a revocation certifciate with the key. Werner, would you recommend they use 2.1 or 2.0 for the Debian Live CD? Cheers, Peter. -- I use the GNU Privacy Guard (GnuPG) in combination with Enigma

Re: managing OpenPGP cards in batch mode?

2016-05-04 Thread Peter Lebbing
On 03/05/16 22:31, Dashamir Hoxha wrote: > Is it on GitHub (so that I can watch you)? >From [1]: the project is in Git, but not on GitHub. You can browse the repository on the web at [2], and you can clone it to your local hard disk with: git clone https://anonscm.debian.org/git/collab-maint/m

How to Encrypt & Sign a file?

2016-05-04 Thread K, Saravanakumar
Hi all, Am to trying to encrypt & sign a file without using the terminal from SAP using the following command. --no-tty --recipient --encrypt --sign --default-key /SAP /input/PPID.TXT The above command resulted with the following error gpg: no default secret key: No secret key gpg: [stdin