4 ms·
Should we be concerned that no new canary notice [1] has been posted after the second canary [2], which promised to post the next one in June 2021? [1] List of
by laristine 5y ago
Should we be concerned that no new canary notice [1] has been posted after the second canary [2], which promised to post the next one in June 2021?
[1] List of canaries: https://www.buskill.in/tag/canary/ https://www.buskill.in/tag/canary/
[2] https://www.buskill.in/canary-002/ https://www.buskill.in/canary-002/
- JeffRosenberg 5y ago> The BusKill team publishes cryptographically signed warrant canaries on a biannual basis. The canary-002 says: Status: All good Release: 2021-06-13 Period: 2021-06-01 to 2021-12-31 Expiry: 2022-01-31 EDIT: Oh, the issue is just that they failed to update the wording of: "We plan to publish the next of these canary statements in the month of June 2021." Looks like a copy from canary-001.
- maltfield 5y agoAh, crap, sorry about that. I'll try to remember to update the verbiage of that lower line to reference the top line to prevent this from happening again in the future. Thanks for pointing it out!
- maltfield 5y agoHi, Michael Altfield here (Founder of the BusKill project and holder of the PGP Key for signing canaries) No, you should not be concerned. The latest canary #002 literally says: Period: 2021-06-01 to 2021-12-31 Expiry: 2022-01-31 Source: https://www.buskill.in/canary-002/ https://www.buskill.in/canary-002/ What matters is what's cryptographically signed. Did I make a mistake somewhere else? The next canary will be posted before 2022-01-31.