News for hackers. Stuff that matters.
Re:Tell HN: Riseup.net fails to update canary; fingerprints ... by makomk on Monday November 21, 2016 @02:01PM (#13008096)
That was probably just commemorating Leonard Cohen's death, and the certificate fingerprints were probably just removed because they switched to Let's Encrypt for those domains. But you never know.
Re:Tell HN: Riseup.net fails to update canary; fingerprints ... by anigbrowl on Monday November 21, 2016 @03:16PM (#13008761)
What good is a warrant canary if it's also used for whimsy or commercial speech? If they don't take it seriously enough for people know what it means then their system isn't worth using to start with.
Re:Tell HN: Riseup.net fails to update canary; fingerprints ... by acqq on Monday November 21, 2016 @03:41PM (#13009004)
A Twitter feed is not a warrant canary.

Edit: the exact link to the official warrant canary is specified in the top post, please don't answer if you haven't recognized that much:

https://riseup.net/pl/about-us/canary

The "If they're relying on double entendres then it might as well be" as a response to "A Twitter feed is not a warrant canary" really has no sense.

https://en.wikipedia.org/wiki/Warrant_canary

Also worth reading:

https://www.schneier.com/blog/archives/2015/03/australia_out...

Re:Tell HN: Riseup.net fails to update canary; fingerprints ... by anigbrowl on Monday November 21, 2016 @09:30PM (#13011149)
Think about it a while longer.
Re:Tell HN: Riseup.net fails to update canary; fingerprints ... by anigbrowl on Monday November 21, 2016 @03:43PM (#13009018)
If they're relying on double entendres then it might as well be.
Re:Tell HN: Riseup.net fails to update canary; fingerprints ... by mirimir on Monday November 21, 2016 @02:19PM (#13008265)
OK, good point.

This could just be drama.

Re:Tell HN: Riseup.net fails to update canary; fingerprints ... by acqq on Monday November 21, 2016 @02:32PM (#13008395)
Maybe it's worth checking their feed before writing?
Re:Tell HN: Riseup.net fails to update canary; fingerprints ... by Bartweiss on Monday November 21, 2016 @02:57PM (#13008597)
That's the problem with canaries, though. By definition, they exist for situations where the canary-owner can't offer positive evidence for compromised security.

I don't particularly think Riseup is in that position, but unless someone actively says "don't worry about our lack of a canary, we took it down for $REASONS and all is well", negative evidence is all you can react to.

Re:Tell HN: Riseup.net fails to update canary; fingerprints ... by mirimir on Monday November 21, 2016 @02:48PM (#13008520)
It could have been an attempt at plausible deniability.
Re:Tell HN: Riseup.net fails to update canary; fingerprints ... by acqq on Monday November 21, 2016 @03:07PM (#13008674)
Have you happened to see their other messages from the same day?

"Dear friends, please remember that internet is not always the answer..."

"by the way, that wasn't a trump related tweet..."

"listen to the hummingbird, whose wings you cannot see, listen to the hummingbird, don't listen to me. #LeonardCohen"

It all "has nothing to do with" canaries.

Re:Tell HN: Riseup.net fails to update canary; fingerprints ... by appleflaxen on Sunday November 27, 2016 @02:13PM (#13050807)
or it means "the canary is dead for a reason; don't trust us"