philpennock

Privacy

There are three categories of data relevant to privacy here: the public keys stored; the HTTP/HKP requests made to access/upload/retrieve those keys; what I as a keyserver operator might do with those requests (logs).

For the public keys: the SKS keyserver pool, run globally by disparate individuals with no formal affiliation, is currently an append-only store, designed to protect against attempts to remove data. Once a key has been uploaded, that data is part of the public record, designed to allow anyone to attempt to verify the name binding within the key, using the public attestations by others about the identity of the key (key signatures). Keys not intended for public disclosure should not be uploaded, nor shared to people who might upload the keys of others. Note that there's no protection against fraudulent keys, with bindings of any name to any email address, and there is no basis to believe any such pairing without first proceeding through evaluation of the public attestations.

The reques

philpennock

def login():
    if not shutil.which('aws-vault'):
        return boto3.Session()
    if 'AWS_SESSION_TOKEN' in os.environ:
        return boto3.Session()
    if 'AWS_ACCESS_KEY_ID' in os.environ and 'AWS_SECRET_ACCESS_KEY' in os.environ:
        return boto3.Session()
    profile=os.environ.get('AWS_PROFILE', 'default')
    rc = subprocess.run(['aws-vault', 'exec', profile, '--', 'python', '-c',
        'import json,os; print(json.dumps({k:os.environ[k] for k in os.environ if k.startswith("AWS_")}))'],

philpennock

#!/bin/sh -eu

aws=/usr/local/bin/aws

die() { printf >&2 '%s: %s\n' "$0" "$*"; exit 1; }

if ! [ -x "$aws" ]; then
  case $0 in
    /*) ;;
    *) die "missing '${aws}' and not invoked with absolute path to skip self" ;;

philpennock

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

I am Phil Pennock, I program in Go.  I am writing this text on 2018-02-08.
It should be found PGP-signed from a key in the strong-set, so that this
public attestation can be verified by others.

To the best of my knowledge, I am in no way affiliated with whomever has
registered the new "jteeuwen" GitHub account.

philpennock

#!/usr/bin/env python3

"""
admin: Passwords repo admin tool

Passwords repo has a bunch of actions which are common; copy/paste is
annoying.  So manage the common actions.
"""

__author__ = 'phil.pennock@spodhuis.org (Phil Pennock)'

philpennock

--- usr.bin/whois/whois.c.orig	2017-08-17 14:00:08.917506928 -0400
+++ usr.bin/whois/whois.c	2017-08-17 14:00:28.975792449 -0400
@@ -76,7 +76,7 @@
 #define GERMNICHOST	"de.whois-servers.net"
 #define FNICHOST	"whois.afrinic.net"
 #define	DEFAULT_PORT	"whois"
-#define	WHOIS_SERVER_ID	"Whois Server: "
+#define	WHOIS_SERVER_ID	"Registrar WHOIS Server: "
 #define	WHOIS_ORG_SERVER_ID	"Registrant Street1:Whois Server:"
 

philpennock

#!/usr/bin/env perl
use strict;
use warnings;

#ps axdro user,pid,ppid,pgid,jid,stat,time,%cpu,%mem,vsz,rss,command ::
# $F[2] is PPID
#   0 means in-kernel process, all "real" processes (except init) have a positive integer as PPID
#   Skip those where parent is this script
# $F[1] is PID
#   Skip this script

philpennock

#!/bin/zsh -f

# TODO: systemd support
# systemd is transitioning to terminating processes when a user session ends,
# so we'll need to start a new scope.
#
# Launching the initial screen/tmux should be prefixed with:
#   systemd-run --scope --user   [$CMD...]
#
# This should go into plexer_new() as a contextual prefix.

philpennock

#!/bin/sh -eu
set -eu

clean_here() {
  find . -type f -execdir sh -c \
    'f="{}";
    t=$(file -hb "$f");
    [ "$t" = "SQLite 3.x database" ] || exit 1;
    printf "%s/%s\n" "$(pwd)" "$f";
    ls -ld 2>/dev/null "$f" "${f}-journal";

philpennock

GnuPG Packaging

A few items here assume zsh as shell (globs and expansion modifiers, print -l).

Required installation order:

Previously recorded:
gmp nettle gnutls npth libgpg-error libgcrypt libksba libassuan  ( pinentry , gnupg )