Tell HN: Riseup.net fails to update canary; fingerprints deleted without notice

Re:Tell HN: Riseup.net fails to update canary; fingerprints ... by Anderkent on Monday November 21, 2016 @01:17PM (#13007614)

Okay, that's telling, but the canary on its own seems to be valid still - it's from August 16, 2016, and they say it should be 'updated approximately once per quarter'

[ Parent | on HN ]

Re:Tell HN: Riseup.net fails to update canary; fingerprints ... by Seylerius on Monday November 21, 2016 @03:00PM (#13008625)

If "quarter" is defined as "3 months", we're officially just on the outside of a quarter since the last update — 3 months and 5 days, to be precise.

[ Parent | on HN ]

Re:Tell HN: Riseup.net fails to update canary; fingerprints ... by mirimir on Monday November 21, 2016 @06:17PM (#13010204)

Well, after (I'm sure) many inquiries about the canary, their latest update says nothing specific, just:

> we have no plans on pulling the plug https://riseup.net/en/about-us/policy/government-faq …

https://twitter.com/riseupnet/status/800815181190217729

[ Parent | on HN ]

Re:Tell HN: Riseup.net fails to update canary; fingerprints ... by TillE on Monday November 21, 2016 @08:07PM (#13010786)

This reads like a vague suggestion that everything is fine, but in context (ie, no clear denial) it's a huge red flag being waved.

[ Parent | on HN ]

Re:Tell HN: Riseup.net fails to update canary; fingerprints ... by dsl on Monday November 21, 2016 @10:47PM (#13011459)

If I were a scary government type and took control of riseup.net, that is exactly the thing I would post to twitter if I couldn't compel them to update the canary.

[ Parent | on HN ]

Re:Tell HN: Riseup.net fails to update canary; fingerprints ... by mirimir on Monday November 21, 2016 @01:35PM (#13007851)

I certainly have no clue. I'm still getting email :)

And they've had indirect FBI attention before: https://riseup.net/en/about-us/press/fbi-seizes-anonymous-re...

[ Parent | on HN ]

Re:Tell HN: Riseup.net fails to update canary; fingerprints ... by cjbprime on Monday November 21, 2016 @01:35PM (#13007860)

> I'm still getting email :)

The failure mode of their warrant canary is not that you stop getting email, but that other people start getting your email too.

[ Parent | on HN ]

Re:Tell HN: Riseup.net fails to update canary; fingerprints ... by mirimir on Monday November 21, 2016 @02:00PM (#13008090)

Sure. But you see, the prudent assumption is that adversaries always get all your email :)

[ Parent | on HN ]

Re:Tell HN: Riseup.net fails to update canary; fingerprints ... by anigbrowl on Monday November 21, 2016 @03:13PM (#13008732)

Your comment is a distraction, not a contribution. People came here to discuss whether a warrant canary had died, not to hear you trot out security 101 cliches.

[ Parent | on HN ]

Re:Tell HN: Riseup.net fails to update canary; fingerprints ... by askmike on Monday November 21, 2016 @03:18PM (#13008781)

> I'm still getting email :)

While obviously this is not about preventing you from "getting email", you might not have received everything. You should consider the service compromised.

[ Parent | on HN ]