How To Verify Signatures With GPG

แชร์
ฝัง

ความคิดเห็น • 48

  • @hbdc
    @hbdc 2 ปีที่แล้ว +11

    Thank you so much for all the real work you do and helping others discover tools to help navigate this incredible world of self sovereignty. As a former dev in the Fiat network and a relatively new humble pleb knowing that people come here to learn through real growth it's truly inspiring. Nothin but ❤️ mate

    • @hbdc
      @hbdc 2 ปีที่แล้ว

      I tried to post this earlier but for some reason the comment seems to have been taken down. I thought I would give it one more try; but in the event that it happens again I will try through other means.

    • @hbdc
      @hbdc 2 ปีที่แล้ว

      (1) I had an idea I would love to pick your and your audiences brain on. For years I have been searching for ways to decentralize parts of the digital information ecosystem. Until discovering bitcoin, I have always run into bottlenecks that I believe this amazing network of decentralized value secured through work can now help solve. One of the issues at the core of these centralized systems that I feel I may be able to contribute to given my bg is routing online traffic. As it currently stands, we have centralized repositories containing the map to route domains to the ips associated with them. To register a domain in that map you have to trust a centralized monolith that becomes an easily corruptible point in that process. I believe bitcoin could help us remove that intermediary. The idea is quite simple. To register a domain one would create a record by filling out some info with the domain name, ip (optional) and possibly some other metadata

    • @hbdc
      @hbdc 2 ปีที่แล้ว

      (2) just by example a record could look something like this
      {
      “ips”: [“xx.xx.xx.xx”, …] ,
      “domain”: “lattice”,
      “subdomain”: “sphere”,
      // (this is where bitcoin comes in)
      “signature”: “xxx...”,
      }

    • @hbdc
      @hbdc 2 ปีที่แล้ว

      (3) This would be a record generated by a user friendly form on a webpage accessible via a node anyone would be able to download and run responsible for routing traffic similar to btc nodes. To generate a valid record you would fill out the form and use a pk that is the "owner" of a utxo to sign a message that is the record itself with that pk. The reason for doing this is two fold. You use bitcoins physical limits as a constraint on the number of records that can be created and you allow any bitcoin holder to freely created an un-censorable record others can use to access their content if made publicly available.

    • @hbdc
      @hbdc 2 ปีที่แล้ว

      (4) By doing so this subnetwork network can piggyback off of bitcoins security. The only requirements would be a limit to the record size, the pk used has to be associated with a valid btc address with a non zero amount of btc, the domain has not already been taken, and there can only be one domain to any utxo

  • @christopheralaimo6504
    @christopheralaimo6504 2 ปีที่แล้ว +6

    Time Stamps
    0:00 - 4:26 - Intro
    4:26 - 7:42 - Understanding GPG & Prerequisites
    7:42 - 11:08 - Installing Homebrew
    11:08 - 14:14 - Quick Lesson: What is a Hash?
    14:14 - 26:01 - Verifying Software Signatures (Examples Specter and Sparrow Wallet) Step 1: Downloading Needed Files, Importing Public Keys
    26:01 - 36:35 - Step 2 & 3: Checking the Signatures. Verifying the Hash
    36:35 - 40:19 - Creating your own Keypair
    40:19 - 44:35 - Exporting / Recovering Keys
    44:35 - 52:01 - Signing / Verifying
    52:01 - 57:41 - Encrypting / Decrypting Messages and Files
    57:41 - 1:00:14 - Final Thoughts

    • @jerfish9959
      @jerfish9959 6 หลายเดือนก่อน +1

      thanks a lot man. like just get to the point. may good vibes come your way 👍🏾

  • @Ones_Complement
    @Ones_Complement 11 หลายเดือนก่อน +3

    If the threat assumption here is the installation file from the site or the site itself was compromised, who's to say the public key you're downloading wasn't as well?

  • @AshnSilvercorp
    @AshnSilvercorp 23 วันที่ผ่านมา

    Exactly what I needed to verify Fedora. At 15:30, their instructions note you need to import the GPG key from the file that you download with curl.
    Fedora's short instruction on their website assumed that I already understood that I had to import a key after grabbing the gpg file. They should really fix that to assume that someone either hasn't verified like that before or rarely does it just due to not doing installs all day.

  • @bandasherpa5619
    @bandasherpa5619 ปีที่แล้ว

    Thanks

  • @Tommy-dr5qs
    @Tommy-dr5qs ปีที่แล้ว +1

    This is outdated now for Specter, as I get error 404 and also Terminal says No such file or directory

  • @martinlutherkingjr.5582
    @martinlutherkingjr.5582 2 ปีที่แล้ว +2

    I’m surprised you didn’t release a video on this years ago

  • @miapassarell7748
    @miapassarell7748 9 หลายเดือนก่อน

    While setting up my Sparrow wallet, I followed your instructions and successfully installed Homebrew however when I attempt to do the same with "core util" it is throwing an error "zsh: command not found: $". Am I doing something wrong? TIA :)

  • @RLTIII
    @RLTIII 5 หลายเดือนก่อน

    Vid starts at 7:00

  • @justin_bauman
    @justin_bauman ปีที่แล้ว

    Great video! Really helped me conceptually wrap my head around all this.

  • @MrFooChops
    @MrFooChops ปีที่แล้ว +1

    Can you please do a video on how to check the integrity of Gpg4win. This is so critical

  • @MichoSalamanca
    @MichoSalamanca 11 หลายเดือนก่อน

    thanks, but wow all this to check signatures?

  • @nekeke1
    @nekeke1 2 ปีที่แล้ว +3

    Please, one for Linux.. Thank you.

    • @angrytrukker4672
      @angrytrukker4672 2 ปีที่แล้ว +1

      Yes please, I am stuck trying to view Craig Raw's key with gpg on my ubuntu laptop. I can see the key by doing gpg --list-keys, but I am trying to see the whole key file if possible to compare to his public key

    • @aaron6841
      @aaron6841 ปีที่แล้ว +2

      Hey all the commands are the same
      gpg --import (name of the key)
      gpg --verify Sig file
      All the same :)

  • @stevewaterfield4862
    @stevewaterfield4862 ปีที่แล้ว +1

    Thank you.

  • @aaron6841
    @aaron6841 ปีที่แล้ว +2

    Makes me laugh when people have tor installed on Mac thinking it's going to make any difference 😂😂😂

    • @skatemore33
      @skatemore33 ปีที่แล้ว

      Why?

    • @aaron6841
      @aaron6841 ปีที่แล้ว

      @@skatemore33 Apple tracks everything you do just having Tor installed won't protect you when you hand over and let apple own all your data.

    • @skatemore33
      @skatemore33 ปีที่แล้ว

      @@aaron6841 are you saying they run keyloggers and interfacing with a HW wallet on an apple device is a bad idea?

    • @aaron6841
      @aaron6841 ปีที่แล้ว

      @@skatemore33 everything is phoning home on apple and windows they have full reports of everything you do on that device. As far as hardware wallets and secuirty goes your fine privacy is a different thing all together though.

    • @btdoe3259
      @btdoe3259 ปีที่แล้ว

      Never keep your private key on a computer that are, or will in the future be, connected to the Internet.

  • @loujohnson6631
    @loujohnson6631 2 ปีที่แล้ว +1

    Until we get something easier to use than the current GPG, it will not be used by the vast majority of people.

    • @vakeone
      @vakeone 2 ปีที่แล้ว +2

      Until fake wallets start stealing people's private keys and sweeping their wallets, because they didn't check the PGP key.

  • @bandasherpa5619
    @bandasherpa5619 ปีที่แล้ว

    Thank you sir

  • @w-hisky
    @w-hisky 2 ปีที่แล้ว +2

    Is it *really* so complicated that we need an hour-long video for what should be a basic function? 🤯 There has to be an easier way ... 🤨

    • @ontariobitcoin2697
      @ontariobitcoin2697 ปีที่แล้ว

      Good question bro - short answer -- yes. 😅
      And Congrats on discovering this channel -- this IS the "easier way" 😊
      Also - piece of advice - for the "long answer" let me just echo the often repeated wisdom of the people, that if you want to be "Sovereign", i.e., "able to fully protect yourself and your loved ones", well it does take some work. Whether that's physically, or in terms of data (privacy)...
      Remember, the quick-n-easy ways folks navigate the web most of the time, (and the glossy-looking apps and sites of Big Tech that encourage such behavior), exist SPECIFICALLY DUE TO leaving out details like those shown in this video. Here, you're seeing how information technology really works. As you probably appreciate, the financial realm is one place where this knowledge matters extra urgently because, of course, it's. your money.
      Real talk, I hope you do fully realize how desperately humanity needs a better education-level on this stuff. Just look at all the disasters happening today, like Lebanon's currency collapsing, eviscerating families' savings; Nigerian bank-runs where ATMs are locking people out of access to their money as they push and shove each other in desperation to get to the machines... so there's increasing adoption of Bitcoin and freedom-oriented software built on top of the Bitcoin-stack and that is what makes this YT channel so valuable. And, IF, like me, you inhabit a rich "developed" country, I hope that like me, you try to resist such hubristic or arrogant thinking as to assume the above desperate situations "could never happen here" ... Anyway to keep it on the bright side, by following this tutorial you are WAY ahead of most people, this knowledge will only empower and enlighten you so I encourage you to keep following these videos! 😊✌🏼

  • @PRODUCTOFNYC
    @PRODUCTOFNYC ปีที่แล้ว +1

    This is too complicated for the vast majority of people and is hindering mass adoption.

  • @btdoe3259
    @btdoe3259 ปีที่แล้ว

    Never keep your private key on a computer that are, or will in the future be, connected to the Internet.

  • @นะระพะพะระนะ-ฉ9ฅ
    @นะระพะพะระนะ-ฉ9ฅ 2 ปีที่แล้ว

    lot during covid.

  • @Hootie_Hoo
    @Hootie_Hoo 10 หลายเดือนก่อน

    nun of dis gonna stop da goberment frum phucing us!

  • @NolaCaldwell-q4e
    @NolaCaldwell-q4e วันที่ผ่านมา

    High quality video content! I have another question: someone transferred me some usdt and I have recovery phrases. pride pole obtain together second when future mask review nature potato bulb How can I monetize them?

  • @RamanYusop-ls9rb
    @RamanYusop-ls9rb 7 หลายเดือนก่อน

    Bit coin aim Raman no wait no money waliet