Apparently my @griffgreen keybase account somehow got added to the coop, but i was never able to find a way to access that account @giveth keybase account which is what i use for Aragon Keybase!
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
I’m @giveth on keybase and am validating myself as @griffgreen on forum.aragon.org
-----BEGIN PGP SIGNATURE-----
Version: Keybase OpenPGP v2.0.80
Comment: https://keybase.io/crypto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=Zzdl
-----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
I’m @jjperezaguinaga on Keybase and am validating myself as @jjperezaguinaga on forum.aragon.org
-----BEGIN PGP SIGNATURE-----
Version: Keybase OpenPGP v2.0.80
Comment: https://keybase.io/crypto
wsBcBAABCgAGBQJcQrS8AAoJEEcNV2F2U20cG0cH/1P1XGJgLR65fRYVzrmKBMpZ
0iN0Rf56yf4AmiPu9jxhmCTfXMZgCBixZniwuX1RXY+JGuCD+VREiGWX+UF47CQY
SdaK2IPkaJRmV31LqVzMP4dCGqSnkPY+iMwVXHXNNVHLO+E4uLRTik2f2WCDzsTM
YMgUkfrWkdvWJh0qx4yQEG+y/LiQcdgXKPvLw/emXdvdRWvWcC5ZOT2tOOHsaHEr
EN8UQY10f413g5pPkEjKSwgLI2zlbzNNda6eVGDN/YsLgwC/yTI2E6dUqU6xI7w6
tDOks6Nt/CMWdZSjBctqvgTkD2Qi3bGIhKEx9kNvinQRIyuIYqcEffOqXFG9FWY=
=JM/+
-----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
I’m rperez89 on keybase and am validating myself as rperez89 on forum.aragon.org
-----BEGIN PGP SIGNATURE-----
Version: Keybase OpenPGP v2.0.80
Comment: https://keybase.io/crypto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=3WWU
-----END PGP SIGNATURE-----
link to aragon.chat proof
imestin
January 20, 2019, 12:19am
24
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
I'm @imestin on keybase and am validating myself as @imestin on forum.aragon.org
-----BEGIN PGP SIGNATURE-----
wsFcBAEBCAAQBQJcQ76XCRCkWCu/YNzdRAAAexEQANkeKfd6yqQfMC5yAe9q4uYO
pYX7ddUQ8yWUTfPKpTrH14/wHkAAehgpbOCZbkTwEGFTg0IQeDvGtaSGgn7RVA3n
5DANVZVXgssKfdvuWHKtL/W1d7AIZ3YuwGsUtgz2ElbQ9Ya2PkUFUYeF76GZnnRb
eJH06XyQk6L/F3QCN48kHR5udLJ8FQd6VnPlXAyvZ+bTZjeI52R53gKae6gWhTwa
9K4oJvRyQlugTCkzC5qeXTBOHJIxghjeVP4yJpThwgzVhvVvurNRzNIAyHBp3mHQ
I8iM2VITg+mnO2QASiV5SoO+FryZ9rAYsykwAx0UAKvVLxaflRjmmY4NVJoo8IM9
E2TIixnwTucHGIn4LPtxgeNYDWW0Lv4wOrpWc1J3qL/33PWoG+vSf1yBuWBPwnan
gMs9zLPHROt9ICaGFUl5qqdYP5RvB7ms0JrrXmNBUoEDJg7F5vG8EQzOI9MIp6oM
jpwy9X9k1f66yozqT/gksaadHOoUFRzHhWcxLqnvVjfLKYZQ8JumMVfHkVT1u1wM
ue+FaX2rXH/qjCc0byIBA8+eWs/jB3xIeh28K2Cx+u90G0ZjIlqzZKEtGHEhwxer
E32FhEnvBrQhZctlph6pWMhyu+sTe+m/9zfbklxR0AIYHysku+r3welWGTPg7tfW
dQhLblZNpaD/hvbToT2D
=6ga3
-----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
I'm @kevbot on Keybase and am validating myself as @topocount on forum.aragon.org
-----BEGIN PGP SIGNATURE-----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=7vAB
-----END PGP SIGNATURE-----
Admin Edit: had to fix formatting so this would verify.
rkzel
January 20, 2019, 9:16pm
27
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Hello, I’m @rkzel on Keybase, @rkzel on aragon.chat, @rkzel on forum.aragon.org too. Beep-beep.
-----BEGIN PGP SIGNATURE-----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=Oqc/
-----END PGP SIGNATURE-----
aragon.chat proof
Julian
January 21, 2019, 12:05am
29
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
I'm @julian_brooks on Keybase and am validating myself as @julian on forum.aragon.org and @julian on aragon.chat
-----BEGIN PGP SIGNATURE-----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=PdZm
-----END PGP SIGNATURE-----
chat link
jorge
January 21, 2019, 7:41am
30
I'm @ji on Keybase and am validating myself as @jorge on forum.aragon.org and @jorge on aragon.chat
-----BEGIN PGP MESSAGE-----
Comment: https://keybase.io/download
Version: Keybase Go 2.13.1 (darwin)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=
=F5Ov
-----END PGP MESSAGE-----
Couldn’t get Keybase to generate a signature with the same format, hoping it works!
lkngtn
January 21, 2019, 3:47pm
31
It does! I expect you were using the keybase console and not keybase.io/sign – Doesn’t make a difference from a verification perspective, but it might mess up @jjperezaguinaga crawler.
1 Like
So funny enough, https://keybase.io/sign can verify @ji signature, but my npm package the crawler is based isn’t at the moment. I think it’s related with the fact that @ji has two public keys (https://keybase.io/ji/pgp_keys.asc , cause of course he does
bingen
January 21, 2019, 5:03pm
33
light:
Then by posting that signed message from the forum account in this thread, you can conclusively prove the two accounts are linked by showing at that 1. you know the credentials to the forum account referenced in the message (since you are posting from that account) and 2. you know the private key of the Keybase account referenced in the message (since the message is signed with it).
Hm, sorry, I don’t get it. Why does actually the message matter? Precisely because “you are posting from that account”, the Aragon forum identity is known, and when you do keybase pgp verify with that message, you can get the Keybase identity. So both can be linked independently from the message.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
I'm @schmidsi on Keybase and am validating myself as @schmidsi on forum.aragon.org
-----BEGIN PGP SIGNATURE-----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=OXxC
-----END PGP SIGNATURE-----
Btw: I had to use the following command on the commandline to produce the result above:
keybase pgp sign -c -m "I'm @schmidsi on Keybase and am validating myself as @schmidsi on forum.aragon.org"
light
January 21, 2019, 5:40pm
35
I can create an Aragon forum account “bingeneguzkitza”, copy your signed message that simply says “I’m @bingen on keybase and am validating myself on forum.aragon.org ”, then post the message in this thread and we wouldn’t actually be able to conclusively verify anything from the message without verifying out of band which forum account is the “real” bingen. By putting your keybase and forum name in the signed message you leave no doubt as to which keybase account is associated to the forum account and vice versa.
1 Like
lkngtn
January 21, 2019, 5:42pm
36
The original intent was that the user name referenced was the user name on the service, so I think what Bingen is saying is valid. But changing it so it includes both makes it much more explicit and prevents people from misreading the instructions and including just their keybase username.
light
January 21, 2019, 5:43pm
37
The original instructions said to put this in the signed message:
“I’m [Keybase username] and am validating myself on [Service]”
1 Like
lkngtn
January 21, 2019, 5:46pm
38
I just had to check the revision history to be sure, looks like I screwed up in the original!
bingen
January 21, 2019, 6:06pm
39
Yes, that makes sense, although it seems to me like a very impractical attack as you would need my message first, so that would prove that mine is the good one, but at least it would raise the alarm.
1 Like
DanielS
January 22, 2019, 3:07pm
40
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
I’m @cryptodani on Keybase and am validating myself as @DanielS on forum.aragon.org
-----BEGIN PGP SIGNATURE-----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=dEgm
-----END PGP SIGNATURE-----
I’m pablochacin on keybase.io and I’m validating myself as @pablochacin on forum.aragon.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
I'm pablochacin on keybase.io and I'm validating myself as @pablochacin on forum.aragon.org
-----BEGIN PGP SIGNATURE-----
Version: Keybase OpenPGP v2.0.80
Comment: https://keybase.io/crypto
wsBcBAABCgAGBQJcSPpAAAoJECtts5yJ5WooEScIAKg/wwOOuLwIoMLIgU29KT8O
uz+hzPheFpoat4my2hn8mzeb//PthqqB+EbIwZM3dopyAtPKPHpRpUeLKmLBr76h
byWE+4BsSrUzWkUiLhRvdnsJ4yhA0Pi6L94NzRB+wA44EszxNKSXA6qCtktUHYG+
kSFW+qEMbF6wnmZ3NN8HaBTX0N6Qj6zP5r+68Pxou7QSCG5TQQYX0JMDdrPrwl70
OQUtrIObTCzRRaSiZocEasDxZ9S9ZYrtI21YaFSU13Sk0048EV3CzSlNHtIwhcYj
uukUugID4ArpVj15JtPRo8P/nvM3gpgdVAAtZI0IQkccewuIUknOok9+QHuSBIU=
=6IqA
-----END PGP SIGNATURE-----
lkngtn
January 23, 2019, 11:38pm
43
Hi @pablochacin
Please wrap the signature in a codeblock using 3 ` before and after. Otherwise it won’t verify correctly!
So I hope you can add my @giveth keybase account which is what i use for Aragon Keybase!
). Leave it as it is right now, will be a fun issue to solve and I’m sure won’t be the last one using the cli.
