Thread

once_aphysicist 5 months ago

This project ended up winning, I'm overwhelmed! 😬

once_aphysicist

Just presented my 2 hr hackathon project at #btcpp privacy edition, Riga!

GitHub

GitHub - feuplebian/git-futz: Fuzz Git commit timestamps to improve privacy

Fuzz Git commit timestamps to improve privacy. Contribute to feuplebian/git-futz development by creating an account on GitHub.

With the recent attacks on developers of cypherpunk software bythe state and other malicious actors, developer privacy is becoming more important. So I developed a command-line tool to fuzz location and time information from your unpublished git commit messages before you push your commits to a public branch. Comments and suggestions welcome :)

View quoted note →

DanConwayDev 🛡️ 5 months ago

This is cool. A few years ago l, all my commits had a start of day timestamps but pgp signing yubikey and qubes proxy got in the way so I stopped.

once_aphysicist

Just presented my 2 hr hackathon project at #btcpp privacy edition, Riga!

GitHub

GitHub - feuplebian/git-futz: Fuzz Git commit timestamps to improve privacy

Fuzz Git commit timestamps to improve privacy. Contribute to feuplebian/git-futz development by creating an account on GitHub.

With the recent attacks on developers of cypherpunk software bythe state and other malicious actors, developer privacy is becoming more important. So I developed a command-line tool to fuzz location and time information from your unpublished git commit messages before you push your commits to a public branch. Comments and suggestions welcome :)

View quoted note →

c03rad0r 4 months ago

@DanConwayDev

DanConwayDev 🛡️ 4 months ago

↩ replying to c03rad0r

This is really cool idea. A few years ago I experiemented with some shell aliases to mess with the commit dates. I gave up as a pgp signature comes with its own date so this needs to be manipulated too and I had an obsure signing setup.

DanConwayDev 🛡️ 4 months ago

↩ replying to DanConwayDev

@once_aphysicist gpg does take '--faked-system-time' so maybe there is someway align the pgp sig dates? I was using a yubikey through a qubeos proxy and gave up because of

GitHub

Allow "faked-system-time" option in qubes-gpg-client · Issue #5034 · QubesOS/qubes-issues

Qubes OS version 4.0 latest Affected component(s) or functionality Qubes split keys functionality Brief summary gpg2 supports "--faked-system-time"...

DanConwayDev 🛡️ 4 months ago

↩ replying to DanConwayDev

here were my shell aliases: ``` shellAliases = { git-today = '' env GIT_AUTHOR_DATE="`date -I`T00:00:00" env GIT_COMMITTER_DATE="`date -I`T00:00:00" git''; git-month = '' env GIT_AUTHOR_DATE="`date +%Y-%m-01`T00:00:00" env GIT_COMMITTER_DATE="`date +%Y-%m-01`T00:00:00" git''; git-last-month = '' env GIT_AUTHOR_DATE="`date +%Y-%m-01 -d '-1month'`T00:00:00" env GIT_COMMITTER_DATE="`date +%Y-%m-01 -d '-1month'`T00:00:00" git''; }; ```

Replies (6)