News for hackers. Stuff that matters.
Re:BusKill – A USB kill cord for laptops by laristine on Wednesday December 15, 2021 @12:40PM (#29569112)
Should we be concerned that no new canary notice [1] has been posted after the second canary [2], which promised to post the next one in June 2021?

[1] List of canaries: https://www.buskill.in/tag/canary/ [2] https://www.buskill.in/canary-002/

Re:BusKill – A USB kill cord for laptops by maltfield on Wednesday December 15, 2021 @12:45PM (#29569176)
Hi, Michael Altfield here (Founder of the BusKill project and holder of the PGP Key for signing canaries)

No, you should not be concerned. The latest canary #002 literally says:

  Period: 2021-06-01 to 2021-12-31
  Expiry: 2022-01-31
Source: https://www.buskill.in/canary-002/

What matters is what's cryptographically signed. Did I make a mistake somewhere else?

The next canary will be posted before 2022-01-31.

Re:BusKill – A USB kill cord for laptops by JeffRosenberg on Wednesday December 15, 2021 @12:43PM (#29569158)
> The BusKill team publishes cryptographically signed warrant canaries on a biannual basis.

The canary-002 says:

    Status: All good
    Release: 2021-06-13
    Period: 2021-06-01 to 2021-12-31
    Expiry: 2022-01-31
EDIT: Oh, the issue is just that they failed to update the wording of: "We plan to publish the next of these canary statements in the month of June 2021." Looks like a copy from canary-001.
Re:BusKill – A USB kill cord for laptops by maltfield on Wednesday December 15, 2021 @12:49PM (#29569233)
Ah, crap, sorry about that.

I'll try to remember to update the verbiage of that lower line to reference the top line to prevent this from happening again in the future.

Thanks for pointing it out!