Jump to: navigation, search

Dev/project-news

< Dev(Redirected from Dev/emergency-news)


Materials[edit]

UNFINISHED (barely started)

Materials - pieces of information and links that should be included in the draft.

project news[edit]

  • plugin / settings based
  • on your desktop
  • cli users: local mail

why[edit]

Examples when project news would have been and will be useful.

  • apt bugs
  • apt signing key revocation

apt-listchanges[edit]

Why not use apt-listchanges instead?

Too technical. Lists changelogs, now news. Does not work in case of apt issues.

subscription channels[edit]

  • emergency news only
  • calls for testing
  • all project news
  • ...?

buttons[edit]

  • remind me
  • do not show this again

read and process this[edit]

https://forums.whonix.org/t/apt-get-upgrading-security-issue-cve-2016-1252/3288/17

read and process this also[edit]

https://forums.whonix.org/t/whonix-upgrade-notification/3284

message expiration[edit]

(some) messages (configurable) should only be valid for a certain time

The Update Framework[edit]

https://theupdateframework.github.io/

emergency news signing key security[edit]

The emergency notification messages should be signed with a different key than the one for repo package signing old and new.

multi sig[edit]

Should use multi sig (key splitting).

The Debian apt signing key is on an official debian.org server. The revocation key is on Debian Developer's (DD) machines. (Not necessarily offline machines.)

They would need at least a 7/12 signature to create the Debian apt signing key revocation certificate.

Source: https://ftp-master.debian.org/keys.html

So by using multi sig and not keeping the the emergency news signing key only on DD's machines, it would be safer than Debian's apt signing key.

/etc/emergency-news.d[edit]

The code for downloading the emergency news should be configurable.

Download the emergency news files from:

  • version 1 - download from clearnet web servers
  • version 2 - optionally download from onion web servers
  • version 3 - optionally download from freenet / or something that implements a permanent takedown attack defense

distribution plugins[edit]

  • Debian, Qubes, Ubuntu, Whonix

application plugins[edit]

Should application packages be allowed to use this mechanism also?

Distributions should be able to disable applications pushing news.

annoyance[edit]

Should prevent against fear of annoying spam messages on their desktops.

speak generally[edit]

Do not speak specifically about DDs since derivative distributions would handle this similarly by adding their distribution specific configuration file drop-in.

test cases[edit]

  • multiple notifications at once

message format[edit]

Text only? Clickable hyperlinks? Html, oh well? Security?

project name[edit]

project-news is the proposed package name and project name. It is not fixed. We can still discuss this at Whonix and should leave this open during publication of this concept.

Proposal[edit]

TODO:

  • Take any of the above bullet points one by one and convert those into a good wording that can be posted on the debian-devel mailing list.

alternative package managers[edit]

Sponsors[edit]

  • Should ask core infrastructure initiative once the concept is ready.

Related[edit]


Random News:

Did you know that Whonix could provide protection against backdoors? See Verifiable Builds. Help is wanted and welcomed.


Impressum | Datenschutz | Haftungsausschluss

https | (forcing) onion
Share: Twitter | Facebook | Google+

This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! See Conditions for Contributions to Whonix, then Edit! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation.

Whonix (g+) is a licensee of the Open Invention Network. Unless otherwise noted, the content of this page is copyrighted and licensed under the same Libre Software license as Whonix itself. (Why?)