«We have introduced a publicly signed warrant canary for Joplin.
A warrant canary is a regularly updated statement confirming that, as of the stated date, the project has not received secret legal orders, gag orders, or demands requiring the introduction of backdoors into the software or its infrastructure».
I never really understood warrant canaries. Wouldn't they be still vulnerable to rubber-hose cryptanalysis? An attacker could coerce you to continue updating your canary as if nothing had happened.
I wonder what event triggered them to add this. The mention of US Patriot Act is intriguing considering they're a French company (I thought the app was maintained by one Frenchman, but following the LinkedIn link on their website shows it's a company in Nancy, France). But I guess it's a copy-paste Warrant Canary.
3 comments
[ 3.2 ms ] story [ 38.5 ms ] threadA warrant canary is a regularly updated statement confirming that, as of the stated date, the project has not received secret legal orders, gag orders, or demands requiring the introduction of backdoors into the software or its infrastructure».