From bf143c597bc06b6248492abe51b67b9ae6043dd5 Mon Sep 17 00:00:00 2001 From: memdmp Date: Thu, 5 Feb 2026 14:50:36 +0100 Subject: canary: clarify, mention mvps --- static/canaries/memdmp:estrogen.zone | 31 ++++++++++++++++--------------- 1 file changed, 16 insertions(+), 15 deletions(-) (limited to 'static/canaries/memdmp:estrogen.zone') diff --git a/static/canaries/memdmp:estrogen.zone b/static/canaries/memdmp:estrogen.zone index 0866acc..a704626 100644 --- a/static/canaries/memdmp:estrogen.zone +++ b/static/canaries/memdmp:estrogen.zone @@ -4,15 +4,15 @@ Hash: SHA512 ┏━ Date & Time Information ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┅┅┅┅┅┅┅┄┄┄┄┄ ┃ ┃ Canary was created at: - ┃ 2026-01-14 00:48:24 (UTC) + ┃ 2026-02-05 13:36:04 (UTC) ┃ ┣━ Proof of Date & Time ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┅┅┅┅┅┅┅┄┄┄┄┄ ┃ ┃ Latest Monero block hash: - ┃ f4eaf2305351edb9ea8c545aa4bfc6d690041e0f3e8152eed77e4063c6348a0d + ┃ 185e8d296e59688a799b690c53ddb5dbf4b93e9510083aa7906fbdb49acd424b ┃ ┃ Latest Linux kernel.org `master` commit: - ┃ b54345928fa1dbde534e32ecaa138678fd5d2135 + ┃ f14faaf3a1fb3b9e4cf2e56269711fb85fba9458 ┃ ┗━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┅┅┅┅┅┅┅┄┄┄┄┄ @@ -22,7 +22,7 @@ Hash: SHA512 ┃ correct key, this message certifies that, to the extent of memdmp's knowledge, ┃ estrogen.zone and it's operators and administrators have, for... ┃ - ┃ ...git.estrogen.zone, mail.estrogen.zone, ntfy.estrogen.zone: + ┃ ...nandcat.estrogen.zone: ┃ - obtained 0 law enforcement request(s) for customer/user data, of which, ┃ - obtained 0 were legally valid, sent in the correct channels, and resulted ┃ in data being turned over @@ -43,13 +43,16 @@ Hash: SHA512 ┃ ┣━ Kyun ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┅┅┅┅┅┅┅┄┄┄┄┄ ┃ - ┃ We have noticed the kyun canary states they have turned over some data. - ┃ Any of our remote systems may be, in some way, shape or form, compromised. + ┃ Data on nandcat, prior to some point before Jan 1st 2026, was stored on Kyun. + ┃ Data on yuridick.gay is still stored on Kyun. See below. + ┃ + ┃ We have noticed the Kyun canary states they have turned over some data. + ┃ We have no way to guarantee this does not include old nandcat data. ┃ ┃ Additionally, their old signing key 120FC25E2A9A3F4784AC6B0EA0B522B4DA201019 ┃ has expired. It has signed a new key created 10 days after expiration. ┃ - ┃ We are working on mitigating this over time. + ┃ All keys on the host, to the extent of our knowledge, have been rotated. ┃ ┃ see also: ┃ git.estrogen.zone/mem-estrogen-zone.git/commit/?id=082a734b95cb8c84e099dc7860d493cea28314b8 @@ -79,8 +82,6 @@ Hash: SHA512 ┃ 120F C25E 2A9A 3F47 84AC 6B0E A0B5 22B4 DA20 1019. ┃ ┃ These services are: - ┃ - estrogen.zone, git.estrogen.zone, mail.estrogen.zone, - ┃ mem.estrogen.zone, ntfy.estrogen.zone ┃ - yuridick.gay, n.yuridick.gay ┃ ┃ Without a valid kyun canary, this canary's validity is void. @@ -94,9 +95,9 @@ Hash: SHA512 ┃ where the time of publishing is defined as the lowest one of: ┃ - The date & time at the top of the canary ┃ - The creation time of the monero hash at the top of this canary - ┃ (https://localmonero.co/blocks/block/f4eaf2305351edb9ea8c545aa4bfc6d690041e0f3e8152eed77e4063c6348a0d) + ┃ (https://localmonero.co/blocks/block/185e8d296e59688a799b690c53ddb5dbf4b93e9510083aa7906fbdb49acd424b) ┃ - The creation time of the linux kernel commit at the top of this canary - ┃ (https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b54345928fa1dbde534e32ecaa138678fd5d2135) + ┃ (https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f14faaf3a1fb3b9e4cf2e56269711fb85fba9458) ┃ ┃ If the date & time are wildly out of line, or are outside of the key ┃ signing this file's validity range, this canary is to be discarded. @@ -172,8 +173,8 @@ Hash: SHA512 ┗━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┅┅┅┅┅┅┅┄┄┄┄┄ -----BEGIN PGP SIGNATURE----- -iHUEARYKAB0WIQS1RnePBrvMjsFn2zzZGXBkh7i23gUCaWbn3gAKCRDZGXBkh7i2 -3oGJAQDc2VXZ30RyyfrJlbEPPgMSE2q1fWuHttJr6hzf4Ws1PQEA88MSoq6kXRnu -OUuD2ChP0V0MCeAdLX2wZST+LJ2wYgE= -=hZMP +iHUEARYKAB0WIQS1RnePBrvMjsFn2zzZGXBkh7i23gUCaYSdFgAKCRDZGXBkh7i2 +3nezAQDYCjfn2kfQOc49T35yBZoLLUkYDkv5UBdLVsALYMI0kwEA6zzBSpvvRwDf +SGB2K/GMFaql3aKsR/tk2xtypb+CswQ= +=Jnm5 -----END PGP SIGNATURE----- -- cgit v1.2.3