Follow-up: MFS Meeting. (at PLANT NOMA) Tue, 17 July. "CryptoPractical"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============3802788332201333410==
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="wlW1TKvenfFMyjgMlDA0YssXfAe2K7ohb"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--wlW1TKvenfFMyjgMlDA0YssXfAe2K7ohb
From: Michael Dorrington <[email protected]>
To: Manchester Free Software <[email protected]>
Cc: Free Software and the United Kingdom <[email protected]>,
 "Open Rights Group (ORG) Manchester"
 <[email protected]>
Message-ID: <[email protected]>
Subject: Follow-up: MFS Meeting. (at PLANT NOMA) Tue, 17 July.
 "CryptoPractical"
References: <[email protected]>
In-Reply-To: <[email protected]>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

On 12/07/18 08:46, Michael Dorrington wrote:

> * Event: Manchester Free Software's July Meeting
>=20
> * Talk: CryptoPractical
> * Speaker: Michael Dorrington

Exercises (and feel free to ask for help on the MFS mailinglist):

1. Set up an encrypted USB stick using LUKS.

Some things to keep in mind:

a) Triple check you are messing with the right block ("disk") device.
Commands like `lsblk` and `lsblk --scsi` help here.

b) Fill the disk/block device with random data first, something like:

dd bs=3D1M if=3D/dev/urandom of=3D/dev/sdKNOWWHATYOUAREDOING

c) Set up requires the command line but, depending how you do the set
up, after that you should get a Desktop GUI prompt when using and not
need the command line.

As is often the case, the Arch Wiki has an excellent generic article on
the topic (but is missing the filling disk/block device with random data
first):

https://wiki.archlinux.org/index.php/Dm-crypt/Device_encryption

What are the details of the LUKS on the disk/block device?


2. Set up an OpenPGP keypair and/or it set up for email (if you haven't
already!)

There are varying opinions on exactly what to do, such as whether to
have a key expiry date or not; whether to install Enigmail from your
distro or not; and so on but the FSF's "Email Self-Defense" guide is one
option to get an OpenPGP keypair and email client set up.

https://emailselfdefense.fsf.org/en/

Who could you relatively easily meet up to do key signing?  Meet up and
key sign with them!


3. HTTPS your website (if you haven't already)

If you haven't got HTTPS for a website you own and/or run then get a
Let's Encrypt certificate for it:

https://letsencrypt.org/

What versions of SSL/TLS is the site offering?  Is that what you want?


Regards,
M.
MFS Chair.

--=20
FSF member #9429
http://www.fsf.org/register_form?referrer=3D9429
http://www.fsf.org/about
"The Free Software Foundation (FSF) is a nonprofit with a worldwide
mission to promote computer user freedom and to defend the rights of all
free software users."


--wlW1TKvenfFMyjgMlDA0YssXfAe2K7ohb
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=Ywxy
-----END PGP SIGNATURE-----

--wlW1TKvenfFMyjgMlDA0YssXfAe2K7ohb--


--===============3802788332201333410==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Fsfe-uk mailing list
[email protected]
https://lists.gnu.org/mailman/listinfo/fsfe-uk

--===============3802788332201333410==--