Survivalmonkey.com Warrant Canary

Discussion in 'Site Announcements' started by melbo, Jun 25, 2014.


  1. melbo

    melbo Hunter Gatherer Administrator Founding Member

    The Warrant Canary isn't dead but we're not using him anymore. Was a neat experiment. See this post for signed proof: Survivalmonkey.com Warrant Canary


    canaryimg. You may have noticed the little yellow canary image at the bottom of our pages. That's our warrant canary :)

    Starting in May 2013, an unprecedented series of disclosures revealed that the NSA and other intelligence agencies have been conducting vast and clandestine electronic surveillance programs in the U.S. and abroad. These disclosures have generated tremendous public interest in, and vigorous debate about, how societies should strike the proper balance between protecting national security and respecting civil liberties.

    Each month we'll update our canary statement with the current date, new headlines and digitally sign the message with our OpenPGP key. Clicking the canary at the bottom of any page will take you to the current statement.

    Background info: Warrant Canary Frequently Asked Questions | Electronic Frontier Foundation

    Gist of statement:
    Code:
    survivalmonkey.com will also make available, monthly, a "warrant canary" in the form of a cryptographically signed message containing the following:
    
    - - a declaration that, up to that point, no warrants have been served, nor have any searches or seizures taken place
    
    - - a cut and paste headline from a major news source, establishing date
    
    ###################################################################################################################
    ##### Special note should be taken if these messages ever cease being updated, or are removed from this page. #####
    ###################################################################################################################
    The signed portion will state that as of the listed date:
    Code:
    No warrants have ever been served to Survivalmonkey.com, or Survivalmonkey.com principals.
    No Survivalmonkey.com servers have ever been seized.
    
    Survivalmonkey.com has not received any National Security Letters (FBI-issued requests for user information) or FISA (Foreign Intelligence Surveillance Act) court orders, and we have not been subject to any gag order by a FISA court. Survivalmonkey.com has never disclosed any private user communications to any third party. Survivalmonkey.com has never received any other classified request for user information.


    Verification Instructions (for those so inclined...)
    Download the signed canary statement.
    Then run this command in a terminal:
    Code:
    gpg --verify canary.txt
    You should get output that says:
    Code:
    gpg: Signature made (Date and Time) using RSA key ID 6BFE4BF1
    gpg: Good signature from "melbo (survivalmonkey.com) <forums@survivalmonkey.com>"
    You should make sure that it says “Good signature” in the output. The date of signature should match the date listed in the file. If this text has been altered, then this information should not be trusted.

    Survivalmonkey PGP Public Key
     
    Last edited: Apr 9, 2018
    Hammerhead, Airtime, BTPost and 2 others like this.
  2. melbo

    melbo Hunter Gatherer Administrator Founding Member

    And before someone asks the question: no, we are not under any assumption that we will receive any such request(s). I was seeking a better way to mirror the SM server to my local machine through rsync and stumbled across the rsync warrant canary policy, did some research and found that there are quite a few sites that are adopting something like this.
    http://www.rsync.net/resources/notices/canary.txt
    Warrant canary - Wikipedia, the free encyclopedia

    @Quigley_Sharps
    @Brokor
    You guys now have the canary too - I always forget about the Dark Monkey style :)
     
    Last edited: Jun 26, 2014
    gunbunny, Brokor and BTPost like this.
  3. Brokor

    Brokor Live Free or Cry Moderator Site Supporter+++ Founding Member

    I was looking for it. Nice to see he's there. :)
     
  4. melbo

    melbo Hunter Gatherer Administrator Founding Member

    Georgia_Boy and NotSoSneaky like this.
  5. Asia-Off-Grid

    Asia-Off-Grid Frugal Secret Squirrel Site Supporter++

    I learn something new on this site, almost every time I load it.
     
    melbo likes this.
  6. kellory

    kellory An unemployed Jester, is nobody's fool. Banned

    .....and on my signature line.....:whistle:
     
    Asia-Off-Grid likes this.
  7. melbo

    melbo Hunter Gatherer Administrator Founding Member

    Code:
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512
    
    2018-04-09
    
    I am melbo
    Public key: 6BFE4BF1
    forums@survivalmonkey.com
    
    The SM Warrant Canary will no longer be updated. It was a cool experiment for a few years but I haven't been very good about updating it.
    
    Here's the final update (which will be removed in a month or 2): https://www.survivalmonkey.com/warrant_canary.txt
    -----BEGIN PGP SIGNATURE-----
    
    iQIcBAEBCgAGBQJazCD4AAoJELubyYFr/kvxBjIP/j5iNUAfXyukhkvkz2wqnMuf
    f16cSAJm+pvXS52OXmDZqAXkXjhkDbLVDa6kxWb3Sx4iA//+IzI0sWB71NF9NtCl
    GWX6N1Oruwq2NKD3pqj/dE4mhTe22f1xwQLBwL7uXEQ7K/NUh25MMLprrQasr1/p
    dU4Q3rRjBArTPGq74QFMMHkZP7RMfqeUSuiSjsqTZhbZwGb9OliSp27DvCr4zS2H
    AFn4Bs1Ft4Z7ECXKW+lI5fZ31D2tpm5r1lMKZ+nNr9Y3Lo62fQAc2BxH4vTdVa1d
    mtfi/acGinSMWSOVkGMS8MiQ0FboyLFsSdY3YtaD9390qoO/iFd8qpZKnm7Lqjfq
    ZMBZ/g/9G8PySux3pkZHccN1YPGCwBnwjqg3UArN7BhEbneKNaGcEALFl7hkqjJD
    6X/ZzlsCYZyt3k66rihIxJEj2kUg7yir6hfW32xuUabyDmmEMAryH931suT0WgS/
    27vsUvrDJMZqq4NOveJRwCKhKJX7Y2dTT0snnsYS3oQeLqPNbYkafGI9ZOIPuYsQ
    8fE601NaDvVVS2MWp5XaG5ULMc+Bms9nuWbAuAEhxZnxOvCyfVhwY1EXI4W4ZgIO
    xGY7Xns+VGasXrC5v7pCedBONLGwd8BEEbE3prt2K7q4RRdKctjhQA9oPtQdTm6X
    vQKoU3wWye6LeNhqDInh
    =692u
    -----END PGP SIGNATURE-----
     
  8. melbo

    melbo Hunter Gatherer Administrator Founding Member

    Code:
    Survivalmonkey.com Warrant Canary (warrant_canary.txt)
    
    
    Existing and proposed laws, especially as relate to the US Patriot Act, etc., provide for secret warrants, searches and seizures of data, such as library records.
    
    Some such laws provide for criminal penalties for revealing the warrant, search or seizure, disallowing the disclosure of events that would materially affect the users of a service such as Survivalmonkey.com.
    
    Survivalmonkey.com and its principals will in fact comply with such warrants and their provisions for secrecy.
    
    Survivalmonkey.com will also make available, monthly (+/- a week), a "warrant canary" in the form of a cryptographically signed message containing the following:
    
    - - a declaration that, up to that point, no warrants have been served, nor have any searches or seizures taken place
    
    - - a cut and paste headline(s) from a major news source, establishing date
    
    
    ##################
    
    ##### Special note should be taken if these messages ever cease being updated, or are removed from this page.
    
    ##################
    
    
    The current message is here:
    
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512
    
    
    
    
    2018-04-09
    
    This will be the final SM warrant Canary update - it's no longer needed and I've been remiss in keeping it current
    
    No warrants have ever been served to Survivalmonkey.com, or Survivalmonkey.com principals.
    
    No Survivalmonkey.com servers have ever been seized.
    
    Survivalmonkey.com has not received any National Security Letters (FBI-issued requests for user information) or FISA (Foreign Intelligence Surveillance Act) court orders, and we have not been subject to any gag order by a FISA court. Survivalmonkey.com has never disclosed any private user communications to any third party. Survivalmonkey.com has never received any other classified request for user information.
    
    
    
    Headlines from https://www.eff.org/deeplinks
    
    Deeplinks Blog by Gennie Gebhart | April 9, 2018
    What We Want To Learn From Zuckerberg's Congressional Testimonies This Week
    
    Deeplinks Blog by Cory Doctorow | April 9, 2018
    Catalog of Missing Devices: TextToSpeech
    
    Deeplinks Blog by Gennie Gebhart | April 6, 2018
    To #DeleteFacebook or Not to #DeleteFacebook? That Is Not the Question
    
    
    -----BEGIN PGP SIGNATURE-----
    
    iQIcBAEBCgAGBQJazBwmAAoJELubyYFr/kvxBoQQAJ9f2azIYZ8todpe6n4JYxQX
    0tyQxiTcQagljvnW1BjfSJA4C1DaWWYaFggAM4ppvTC4GkxnQvdqeoO0YkgvSbpl
    sZALzvmPDy40I0DiG//T/Tztw2xXMO3k61e9UH1yAF/HH4sjb3jDE/OMlwehRb+V
    LLsiiwFQx3TgzN2H7IjxWACDN3UJ3qXzgSWlptBqpR3i05/4nQo4LJWIgDl9oxXx
    7OVUQyFEf2EphPXIHqsjjuYz5m4b9k8QH4nTHCVz5Vgw8XLhanzA6LrPBkdWzBfT
    uGbEquOuB2UMD2Y3UU8p72JNLduxpOcU9/zwPHTTspZG+J0rZYMJf4JNnG9acDn8
    gzu+dYH172Zw+gPkWe8NSGgo625kHyWDwPzVrGPjLmluMyV2D3e7XjjXZSj3M1XK
    haEG7U/Iy2mWGK8ixvhy4N7euN/NDz8JswrdNvheb/eMDD1XfK8nExmNKEdSDtJF
    gt2143YQI8MtzXO8ILsxSt6rLeA0+mC5O9XvmLgzzjYwuGw+sX/ImueZ8wHiwug0
    PAhblEJVJLKUheSkB35WdH6uY3CEmDl1/FG8JUTf1WWQu7qOiO9GFyKAgdSNCvz/
    RqBN0o1pTdXMOS6+shX3wxEtqzhwMuZ0j0aww8L5NDkPs3ixXNe96NKxWDUlxpk7
    cLDHSpeut9RJOB2FYO7t
    =gAKi
    -----END PGP SIGNATURE-----
    
    
    Verification Instructions: https://www.survivalmonkey.com/threads/survivalmonkey-com-warrant-canary.49526/
    
    The primary survivalmonkey.com public key (6BFE4BF1) is located here:
    https://www.survivalmonkey.com/pubkey.txt
    Or on most major key servers as forums@survivalmonkey.com 6BFE4BF1
    
    This file, warrant_canary.txt, is located here:
    https://www.survivalmonkey.com/warrant_canary.txt
    
    
    Notes:
    
    This scheme is not infallible.  Although signing the declaration makes it impossible for a third party to produce arbitrary declarations, it does not prevent them from using force to coerce Survivalmonkey.com to produce false declarations.  The news clip in the signed message serves to demonstrate that that update could not have been created prior to that date.  It shows that a series of these updates were not created in advance and posted on this page. This warrant canary was partially borrowed from rsync.net's canary: https://www.rsync.net/resources/notices/canary.txt
    
    Quis custodiet ipsos custodes?
    
    
    
     
    Dunerunner and ghrit like this.
survivalmonkey SSL seal        survivalmonkey.com warrant canary
17282WuJHksJ9798f34razfKbPATqTq9E7