dkg's blog

A recent article in The Atlantic makes the case that very large language models effectively contain much of the works they're trained on.

AI and Secure Messaging Don't Mix Over on the ACLU's Free Future blog, I just published an article titled AI and Secure Messaging Don't Mix.

Transferring a Signal account between two Android devices I spent far too much time recently trying to get a Signal Private Messenger account to transfer from one device to another.

A Call for Public Discussion about App Store Oligopoly Over on the ACLU's Free Future blog, I just published an article titled Your Smartphone, Their Rules: How App Stores Enable Corporate-Government Censorship.

dkg's New OpenPGP certificate in December 2023 In December of 2023, I'm moving to a new OpenPGP certificate.

I'm lucky enough to work at the intersection between information communications technology and civil rights/civil liberties.

Bitstream Vera must die.

dkg's 2021 OpenPGP transition As 2021 begins, I'm changing to a new OpenPGP certificate.

Today at the ACLU, we released a whitepaper discussing how to evaluate some novel cryptographic schemes that are being considered to provide technology-assisted contact-tracing in the face of the COVID-19 pandemic.

DANE OPENPGPKEY for debian.org I recently announced the publication of Web Key Directory for @debian.org e-mail addresses.

WKD for debian.org You can now fetch the OpenPGP certificate for any Debian developer who uses an @debian.org e-mail address using Web Key Directory (WKD).

Community Impact of OpenPGP Certificate Flooding I wrote yesterday about a recent OpenPGP certificate flooding attack, what I think it means for the ecosystem, and how it impacted me.

OpenPGP Certificate Flooding My public cryptographic identity has been spammed to the point where it is unusable in standard workflows.

Update I've scrapped my first try at a new OpenPGP certificate for 2019 (the one I published yesterday).

In my work at the ACLU, we fight for civil rights and civil liberties.

I've been working on cryptographic e-mail software for many years now, and i want to set down some of my observations of what i think some of the challenges are.

The GNU Privacy Guard (GnuPG) upstream team maintains three branches of development: 1.4 ("classic"), 2.0 ("stable"), and 2.1 ("modern").

I encourage anyone interested in debian development to get involved with the Reproducible Builds project.

When paultag recently announced a project to try to move debian infrastructure to python3, my first thought was how large that undertaking would likely be.

I just took a few minutes to write up my preferred Debian packaging practices.

I'm using grub version 2.02\~beta2-2.

The abbreviated title above means "Appreciation for Localization" :) I wanted to say a word of thanks for the awesome work done by debian localization teams.

Today, i uploaded GnuPG 2.1.0 into debian's experimental suite.

I'm replacing my OTR key for XMPP because of heartbleed (see below).

We changed the default PGP signatures generated by enigmail in debian from Inline PGP to PGP/MIME last year, and the experiment has gone well enough that we're now using it in jessie and wheezy (where it arrived as part of a security update to make the ex…

I've said recently that pervasive surveillance is wrong.

If you maintain software in debian, one of your regular maintenance tasks is checking for new upstream versions, reviewing them, and preparing them for debian if appropriate.

Fingerprints and Key IDs OpenPGPv4 fingerprints are made from an SHA-1 digest over the key's public key material, creation date, and some boilerplate.

This Monday, I attended a workshop on Multi-party Off the Record Messaging and Deniability hosted by the Calyx Institute.

Many protocols today allow you to upgrade to TLS from within a cleartext version of the protocol.

As I mentioned earlier, the information in the documents released by Edward Snowden show a clear pattern of corporate and government abuse of the information networks that are now deeply intertwined with the lives of many people all over the world.

Yesterday, i said a sad goodbye to an old friend at ABC No Rio.

A friend is teaching a class on data analysis.

Support privacy-respecting network services!

Occasionally, someone asks me whether we should encourage use of the --ask-cert-level option when certifying OpenPGP keys with gpg.

Most OpenPGP User IDs look like this: Jane Q.

Today i saw a billboard on the side of a bus.

I feel like i've done a lot of blogging recently about failing to do things with proprietary software.

i have a colleague who is forced by work situations to use Windows.

Better debugging tools can help us understand what's going on with MIME messages.

I was upset to learn about Aaron Swartz's death last week.

A friend wrote me a simple question today.

I run mpd on debian on "igor", an NSLU2 -- a very low-power \~266MHz armel machine, with no FPU and a scanty 32MiB of RAM.

I'm maintaining a lab of debian squeeze machines that run OpenOffice.org (i'm considering upgrading to LibreOffice from squeeze-backports).

Here is a bit of simple (yet subtly-flawed) sql, which produces different answers on different database engines: 0 dkg@pip:~$ cat test.sqldrop table if exists foo;create table foo (x int, y int);insert into foo VALUES (1,3);insert into foo VALUES (1,5);se…

In supporting a labful of Debian GNU/Linux machines with NFS-mounted home directories, i find some of my users demand a few proprietary programs.

i dislike having to run Windows as much as the next free software developer, but like many sysadmins, i am occasionally asked to maintain some legacy systems.

This paper should be required reading for anyone developing, deploying, or administering web applications.

A few months ago, Adobe announced a slew of vulnerabilities in its Flash Player, which is a critical component of Adobe AIR: Adobe recommends users of Adobe AIR 2.6.19140 and earlier versions for Windows, Macintosh and Linux update to Adobe AIR 2.7.0.1948.

I've been getting strange failures on some architectures for xdotool. xdotool is a library and a command-line tool to allow you to inject events into an existing X11 session.