Clint Adams: Only in San Francisco would one brag about this
I dated Appelbaum! she said.
I gotta go, I said.
unset sidebar_visible
to your ~/.mutt/muttrc .
O(n^2)
complexity for archive member lookup..par
files as Zip archives, including a patch which was merged into master
..debian.org
machines.jenkins.debian.net
and tests.reproducible-builds.org
run. Many thanks to Profitbricks for supporting jenkins.debian.net
since August 2012!jenkins.debian.net
.#!/bin/zsh
set -e
PATHS=$(tempfile)
NEWKEYS=$(tempfile)
NEWKEYRING=$(tempfile)
FARTHEST_TEN=$(tempfile)
trap "rm -f $ PATHS $ NEWKEYS $ NEWKEYRING $ FARTHEST_TEN " EXIT
keyring=$ 1:-ksp-dc16.gpg
myfpr=$ 2:-2100A32C46F895AF3A08783AF6D3495BB0AE9A02
#keyserver=$ 3:-http://pool.sks-keyservers.net:11371/
# this doesn't handle hokey fetch failures
#(for fpr in $(hkt list --keyring $ keyring --output-format JSON jq '.[].publickey.fpr')
#do
# hokey fetch --keyserver "$ keyserver " --validation-method MatchPrimaryKeyFingerprint "$ (Q)fpr "
#done) >$ NEWKEYS
#
#gpg2 --no-default-keyring --keyring $ NEWKEYRING --import $ NEWKEYS
cp "$ keyring " "$ NEWKEYRING "
gpg2 --no-default-keyring --keyring $ NEWKEYRING --refresh
hkt findpaths --keyring $ NEWKEYRING '' '' '' > $ PATHS
id=$(awk -F, "/$ myfpr )\$/ sub(/\(/,BLANKY,\$1);print \$1; " $ PATHS )
grep -e ",\[$ id ," -e ",$ id \]" $ PATHS sort -n tail -n 10 > $ FARTHEST_TEN
targetids=($ (f)"$ $((sed 's/^.*\[//;s/,.*$//;' $ FARTHEST_TEN ; sed 's/\])$//;s/.*,//;' $ FARTHEST_TEN ) sort -n -u grep -v "^$ id $") " )
targetfprs=($(for i in $ targetids ; do awk -F, "/\($ i ,[^[]/ sub(/\)/,BLANKY,\$2); print \$2 " $ PATHS ; done))
gpg2 --no-default-keyring --keyring $ NEWKEYRING --list-keys $ targetfprs
Output:
pub rsa4096/0x664F1238AA8F138A 2015-07-14 [SC]
Key fingerprint = 3575 0B8F B6EF 95FF 16B8 EBC0 664F 1238 AA8F 138A
uid [ unknown] Daniel Lange <dl.ml1@usrlocal.de>
sub rsa4096/0x03BEE1C11DB1954B 2015-07-14 [E]
pub rsa4096/0xDF23DA3396978EB3 2014-09-05 [SC]
Key fingerprint = BBBC 58B4 5994 CF9C CC56 BCDA DF23 DA33 9697 8EB3
uid [ undef ] Michael Meskes <michael@fam-meskes.de>
uid [ undef ] Michael Meskes <meskes@postgresql.org>
uid [ undef ] Michael Meskes <michael.meskes@credativ.com>
uid [ undef ] Michael Meskes <meskes@debian.org>
sub rsa4096/0x85C3AFFECF0BF9B5 2014-09-05 [E]
sub rsa4096/0x35D857C0BBCB3B25 2014-11-04 [S]
pub rsa4096/0x1E953E27D4311E58 2009-07-12 [SC]
Key fingerprint = C2FE 4BD2 71C1 39B8 6C53 3E46 1E95 3E27 D431 1E58
uid [ undef ] Chris Lamb <chris@chris-lamb.co.uk>
uid [ undef ] Chris Lamb <lamby@gnu.org>
uid [ undef ] Chris Lamb <lamby@debian.org>
sub rsa4096/0x72B3DBA98575B3F2 2009-07-12 [E]
pub rsa4096/0xDF6D76C44D696F6B 2014-08-15 [SC] [expires: 2017-06-03]
Key fingerprint = 1A6F 3E63 9A44 67E8 C347 6525 DF6D 76C4 4D69 6F6B
uid [ unknown] Sven Bartscher <sven.bartscher@weltraumschlangen.de>
uid [ unknown] Sven Bartscher <svenbartscher@yahoo.de>
uid [ unknown] Sven Bartscher <kritzefitz@debian.org>
sub rsa4096/0x9E83B071ED764C3A 2014-08-15 [E]
sub rsa4096/0xAEB25323217028C2 2016-06-14 [S]
pub rsa4096/0x83E33BD7D4DD4CA1 2015-11-12 [SC] [expires: 2017-11-11]
Key fingerprint = 0B5A 33B8 A26D 6010 9C50 9C6C 83E3 3BD7 D4DD 4CA1
uid [ unknown] Jerome Charaoui <jerome@riseup.net>
sub rsa4096/0x6614611FBD6366E7 2015-11-12 [E]
sub rsa4096/0xDB17405204ECB364 2015-11-12 [A] [expires: 2017-11-11]
pub rsa4096/0xF823A2729883C97C 2014-08-26 [SC]
Key fingerprint = 8ED6 C3F8 BAC9 DB7F C130 A870 F823 A272 9883 C97C
uid [ unknown] Lucas Kanashiro <kanashiro@debian.org>
uid [ unknown] Lucas Kanashiro <kanashiro.duarte@gmail.com>
sub rsa4096/0xEE6E5D1A9C2F5EA6 2014-08-26 [E]
pub rsa4096/0x2EC0FFB3B7301B1F 2014-08-29 [SC] [expires: 2017-04-06]
Key fingerprint = 76A2 8E42 C981 1D91 E88F BA5E 2EC0 FFB3 B730 1B1F
uid [ unknown] Niko Tyni <ntyni@debian.org>
uid [ unknown] Niko Tyni <ntyni@cc.helsinki.fi>
uid [ unknown] Niko Tyni <ntyni@iki.fi>
sub rsa4096/0x129086C411868FD0 2014-08-29 [E] [expires: 2017-04-06]
pub rsa4096/0xAA761F51CC10C92A 2016-06-20 [SC] [expires: 2018-06-20]
Key fingerprint = C9DE 2EA8 93EE 4C86 BE73 973A AA76 1F51 CC10 C92A
uid [ unknown] Roger Shimizu <rogershimizu@gmail.com>
sub rsa4096/0x2C2EE1D5DBE7B292 2016-06-20 [E] [expires: 2018-06-20]
sub rsa4096/0x05C7FD79DD03C4BB 2016-06-20 [S] [expires: 2016-09-18]
Note that this completely neglects potential victims who are
unconnected within the KSP set.
reprotest
, including a
discussion on different types of build variations and the difficulties of
specifying certain types of variations.SOURCE_DATE_EPOCH
spec explaining FORCE_SOURCE_DATE
.
Some upstream build tools (e.g. TeX, see below) have expressed a desire to
control which cases of embedded timestamps should obey SOURCE_DATE_EPOCH
.
They were not convinced by our arguments on why this is a bad idea, so we
agreed on an environment variable FORCE_SOURCE_DATE
for them to implement
their desired behaviour - named generically, so that at least we can set it
centrally. For more details, see the text just linked. However, we strongly
urge most build tools not to use this, and instead obey SOURCE_DATE_EPOCH
unconditionally in all cases.
Toolchain fixes
SOURCE_DATE_EPOCH
support for all engines except LuaTeX and original TeX.SOURCE_DATE_EPOCH
corner cases, eventually
resulting in the FORCE_SOURCE_DATE
proposal from above.-fdebug-prefix-map
in DW_AT_producer
, thanks to original patch by
Daniel Kahn Gillmor.SOURCE_DATE_EPOCH
applied upstream, original patch by Alexis
Bienven e.SOURCE_DATE_EPOCH
, thanks to original patch by Alexis Bienven e.9F6C6333
that corresponds to both key
1AE0322EB8F74717BDEABF1D44BB1BA79F6C6333
and
88BB08F633073D7129383EE71EA37A0C9F6C6333
, and you don't know which of the two
to use.
You go to http://pgp.cs.uu.nl/ and find out that the site uses short key IDs,
so the two keys are indistinguishable.
Building on Clint's hopenpgp-tools,
I made a script that
screenscrapes http://pgp.cs.uu.nl/ for trust paths, downloads all the
potentially connecting keys in a temporary keyring, and runs hkt findpaths
on
it:
$ ./verify-trust-paths 1793D6AB75663E6BF104953A634F4BD1E7AD5568 1AE0322EB8F74717BDEABF1D44BB1BA79F6C6333 hkt (hopenpgp-tools) 0.18 Copyright (C) 2012-2016 Clint Adams hkt comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it under certain conditions. (4,[1,4,3,6]) (1,1793D6AB75663E6BF104953A634F4BD1E7AD5568) (3,F8921D3A7404C86E11352215C7197699B29B232A) (4,C331BA3F75FB723B5873785B06EAA066E397832F) (6,1AE0322EB8F74717BDEABF1D44BB1BA79F6C6333) $ ./verify-trust-paths 1793D6AB75663E6BF104953A634F4BD1E7AD5568 88BB08F633073D7129383EE71EA37A0C9F6C6333 hkt (hopenpgp-tools) 0.18 Copyright (C) 2012-2016 Clint Adams hkt comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it under certain conditions. (0,[])
Next.