From bc1ea6fb8e0c6554a31a3bb06075ad492cab822c Mon Sep 17 00:00:00 2001 From: JudeSafo Date: Sat, 26 Mar 2022 21:35:06 -0700 Subject: [PATCH 1/2] digital-copyright to verify authenticity of your soureccode and halt forgery in the event of a software supply chain attack --- opengs-digital-copyright.txt | 1 + uashield-digital-copyright.enc | Bin 0 -> 5264 bytes 2 files changed, 1 insertion(+) create mode 100644 opengs-digital-copyright.txt create mode 100644 uashield-digital-copyright.enc diff --git a/opengs-digital-copyright.txt b/opengs-digital-copyright.txt new file mode 100644 index 0000000..93bfc8e --- /dev/null +++ b/opengs-digital-copyright.txt @@ -0,0 +1 @@ +Instructions:\n/nhash: QmedrV35hYisKPHm328bRkycRd4uc6vV7U7u5gqtnBSnW5\nbrowser: https://gateway.ipfs.io/ipfs/ QmedrV35hYisKPHm328bRkycRd4uc6vV7U7u5gqtnBSnW5/nmotivation: The presidential executive order, March, 2021 requires all software sold to the government to show a traceable dependency tree. Your hash resides on the filecoin blockchain node at the address given above. You can verify authenticity by comparing with the private key encrypted in your source code ... diff --git a/uashield-digital-copyright.enc b/uashield-digital-copyright.enc new file mode 100644 index 0000000000000000000000000000000000000000..64c11ed51168ce0394d2f450adab4f8094c0311c GIT binary patch literal 5264 zcmV;B6mRPn%iG#ci4GIBeT;x(O9w&&HSt`ReP` zvlodF>>TC?f2?40G3p#o_+AFrgPS9%??4G*>o3h&(Gc*x0-cUfeX*w(Slm@1Z(waC zOO#djcHYKwDtr=}@xO$sXn2BiEOOaxIta&ANvMPURi4ppQ@8o&l|4<|T}u|h^f!);ad||zzPFOf;@~k`DNYlo>H(9D zU^HsxAEC=h+w{c^`t6!k`Lg(Ww6@xOV&h|rv_&WRBmk=wH^MwvB5P-~tO;~0rMgB= z$T~0or|x=Pblk8BvsY`lhdp1r8q=9}_iREEQK85sY8lOVqeqk??lW=BoVfg~t)Yel z$s6f*#=02DJ00&pV6jjaq`*6-6M-BWyzGhzc8@U>*7* zk;cT6!Bmae_eMSSh8%xDfQZFlpKrM>c1cyZ?v(%-tUW4AK2*U>srgKh3s0M~L@Wg~ zC%DI+(ay4?LFq^)Pe<_EhL2AXVsuI|Wlfyt?cKB1XGk)A+eI{tjG!6WX#aRUDZMAg zt8@7&Y)9k^AA!+_94loe;+0mEZlRx?^ZxzI4T5<{-uVJIZuM6Pj9(5ot?>rlr$182 z^$9(Y-VC5iMB9?|Ueojfh-vz;<<~7Sy>jc=UMSSPeAyk37eY-nrZSmuPH8tsaiE*q zC&rtkofZJ-hA9&`?t7-ep~`m!Tcf|AI>s`Rc;5O#X<0HgflmaXRdaPRaQ_4=98^N0 znydBLJfbq4JjL?@$r$^;;EgHzjx>MFx|~KchBP-c1JB_v)6T$43zP(wu{(+w`coiw z9;>7bC5))Zw`2>AT+7hwcR~Tj044JlCJnzvWA{N)+>`|m`(PZATzOf$RknF!k(wBffW+@Q@9&KIAknA3@7>{ zsGbM?%RaIlmA$IZT;ENFn=AnL+Z0`tP{shBx{6$VV3&G8qrnHP@n z>`mwCb}G?pYioWoR@!jt&{D0~!QrFc#e;}FFE_o~IUF}N9mtTw!|R*1BSV^L5&;at*3_CH zRxnm^WoWwI&Cl-?N%C6r)b5v8$a@1Y7DQ~lC0*2+uHvhCTnXwrj1X_kA3#P^Eqdsd zvA?CCQ`zxgB>#=fL{lUOU`a8=wx+=iKJ7D&Jn196m6DQef^2quIeJzqFKDHL?ltA(%B`C)+2x>PD_+7<0bbmNJhHswIT^OL^up+>|6D(buPI9 zcCOmq8jt}=pP~?S(@IEeN^1zkFQ)NtiJ!0>X@?b_4WU_e&^Ez4EBiBA-e8pUvgq=> zX&fQv1-d!T5-XAwYo9R_)!radwL|KO^d7Q9W{dWnz7vA+jFYWod&pqBb(Jl2)!Fhj zh8DyFlI$6UJFs_!O*MJ%R7g^UF(ESZV#Ff!A&Yy{Y$aB;ltYXt=sx8|NqEslW)j3z z@(nw6QKTbP^Ux;x;#1%**i;2}Cr@!ebVYWF@TE7AYye}o#4{F2vL^V+z@676wGi|M znjAU9+^>o*JvlprKKoswmuXKL=xE;cW!lI49^%kgOEWtZ1~|5C@(}Xqdj#{7e_?b! z$?ixo#{_bKu4-;?S&89EVNjdd z7jO?@Fn2`;K7v3$ZFd!+;LDNk_XlZ4GEx7Y^k(Zl*|S3y$hXm4Y_OIIcftg}49{*6 zJr4>OqTn{ClO{UlGomYs&F;4OoAB-CmC*VNNikKO+e|^it=aYQ`;#Rop|&d$%K?|1 zNGuyAjxJ#N1=O+8VLT+Ck%u!!gCRR+`YbNm6uxpoNJol5%1uA^5KA`XEm-+eI&ZKV zW!>h^`&43onj$al+K(k8>=Piwqs9ke$ssy8vOEAt?EF9kQR3$p zuGrlGKemt?TR~xzuGxJlohKT~(`k@Fp!e{KK{+UB<#dUy^ha-vM$TU(Ci))P z)hZ&zRsXl4=tMehR%9-!gIn+LRF8fE2GYzrU^J=9UYH;Zr!Som135Rt3dk<}h?^uE z=Py*)c>7gmd^m~4PHhMM8&oV%EwjtP5NM_HDHibyfz)=3PN~A{mW(~>8Z6Ue%2-wz zXF6+G%7JXy{PH35I}zmHE^97Z8P%hd5AtjHdcVN3reWE1F9LcLI0_5q+j%vS8v_^o zv;z_HNdB!W7;6o)DMdPw+^1Pg@k?OlCdJ2c$r!D*qra__F4#M&F^hc&Uqt)WA3nzB zGm4sV_!}4=#j;su{UAO{T>tt9Kb;~3QL9*%R)iz`RQliqe7b%RY!;u=tX04WRxy)3 zS@;Y`r3~(#j`W!ZlQ2(dRt<1Y{5>fxfI7!!z0k7LoeU1fXy&Xq13UYem9`bV)o5S0 zC*c6-d*IK10pvA~=u;JnMV!{Y0yROy;^UG2$9NBWW)z311elGCpY})|-`%IrJ52Qv zG?l4tn$d(gvuJDaE`YmOszdE3Enq5KRH2MGHZlUnENQw#W2w;qMmJs%ItoyT(OJq? z!yfZc=Dx#)vz{*|@18!OCm#)N!voWe?dS&buI`4OMH?>ht3u>rfua>7+LyewiscX_ zB4fGekFzkb?7JoB<`1n@N*Y@w*Xg3IZyJbzS^i}i=X!@uM@e~I1aM=6Gs1uU3TZs{ z20~Ea(cqsl>oL6`n$$}vT4Uuh-2;3e@wmXal%g;(!3|>wSb6T(%62@F$u#>1!Aub_ zhG_~FXt>EkEF4uq&e+3lkq)wz+ zVTn|kdO=Eldk0J5avTPIX@w&C-Sr15Px~uTQ99_YaIgsx0x?zle_bmY z`#VbOWSF>o>iati-m)W-vXX;VY|C>FW1vFwp7iXk!g~UMK|ge(&!=$l_6;F$cLP3P03ZcJ&s zOz*M<3_0T%7KHJJa~U@k6FcK4ZCvoC#K2IKqrhxzq*x~7{v%p3@p5|CV}ib4qdBc^ zl^N{A7z5<;jju1?oyj)lRfLPn!v}+hWs17@o)g`St~wuGU|n7K$)&&2)Yp+zKFI>r0_0b{1~yX#xkMXnX3rp}YLV78!Zi+}T0V@!wdu zik4CKIAC96^?_DaJa%$98QJRMGhwCUhlo6Vnt5?lS%}ly(V9#vqZ5Oj8zs=vH{6)l zXPi-aUu2V#)*a6&2^tbRwW~K33v-hxFV_<-+c$VPDn`^EC3y$qu?M*PY}#%Nmel;B zX^OL>4XYN4nMXzqnS@wN{B>MCKmCVS(tKvJbZg~j-vToQWD_B)k;p5T*}9&Y5~{Ht zxKAR8I*W~kjWdGzmSnx_+tuyvH7{vEpLFo>`w}!2JdYf-_U&qa7Y(4_szbha%Wtv8 zC*3wnPKLhI075I2S`Tl`(Eq1c~EeftQhlG;}Vf zIE;rNT9lP`d*~knqNHIn-O;7Y1k76iJfy`$B5aQ_he%NyR&sz_%z(04 zC*D?n=XN6gBvGw@cLXH#fadFL{*7irHiR?M0^ciLCe@0FF)KN9b>@Y3n|h;H1HAhR zOZGJ!TH+&!tW#9h95QqxrQgFet4|4EkXIRy>O(v#y{YA>W^<$n=Ntr}PNXUj=IEhn zhIX!}=u5cZP0h+`xH~3d_tx&*k%K$;K|Pa zJMw0v#vVI6k4c4?z2gBI!Xe*q_tvq%f|^!-?iQS5RX)6NaOaI zLdB@#gY+Kg`Ax=TO7UAXT}}v^`;!H%4P)wFaK+$+=C{ik8$)V^R=lpCrzJUEP-jv|fH% zR7j&5=>39Egi9k3m!hXT+`89=#ch*xxh*m`MzfW8-@LlolZl{lEK>1 zU*fakQ@?z~qP2_>`9ctdtg1?fRs9iYZAyOMX}96D=O7${ZC1SO&Yxq>I-$#Qz5TrU zfg>gv;izqz5r-qQH2LB4^iv%7)1$SbiGmFeP2m{LDqak6-GM8$<0fuhq&_Hr>M&AG z31bb3+QWf^x6Bt)qLCW^bDvO7nPKb$x;Bh;2i|eJ$D=D0@f?#wCe*urSO^bgPdRO* zgF4&#t)p5`ufrG(+H7f(jGK{#BjmqsB03Nc2;W9(muon(MNY!zAWLXeq*FLD^Jjf$ z9hMl4QJf=Rm^OkDtHj!zntmoqz7T7Dj|x9rf2`C~9QA=0m~l3Svqf>O^YQ*Gs+}MJ zgwLAlMg%}b{;V}nC9T8E1iEOwsA-I3#10dXH^2ON?vXTweqmKeEkl&U1R8fS&wyNt zuSg=Y+Lhe3!A&XN+(SCv>0t%W0(C&nA~S|a_^gGL$IHAsz#-B(1^(`3>j9fybUl$l z7E(d!d>tsIYDvM&cg$-Z-J{fO5y>)i^-px5X zp7Nv6VD=97P;*8#?nEw+Ij9_XHc9WO2CiGkRvC)>>%uY3E1{o|kqqDTj)dqdxN8m(mbp$)KQtYf@msGY5RInDjgWw;8cxBsE@+ zfTjI(0#8N=c?yBKxM!xEOlmtep3BdHW~HnZft6vxljISAN@=sC#I@jZoC8woB2v0^ z$C54!N`5s6z_r2z460H@phGSPHG)FvcVjCtwJ;ZqJ!^3xulbjr*on4-_4$>ev(v(g zaPwdWkaS#U0}--n_7C6uF#SB|Bl5L%|9hCzuUM$d7$CBo_B*1b|ALZK5I>Rl7GcRL zsd$wv8E#{WfVy@@zUQIV$}MVBu2gRir>I zUIl2&aJ4Id*yTL#orhX1+Bar%h>W0cZ3X*#=TRb^u>j7rM;VCHPhAi-F*}T1)uq<4 zvX%+-!b;gDRrET4*v3gZ2ymL{(Fu$J>Mm>vE~lf`_%efg*t+@^>&$&isSRr;a!7nX z_omG%^;XN~|5~)x;MW|x_v3VVxhDK{d%6T_1ThX{HgI-41hvb~h2)8?+j7{*H;yTQaSqIEUBaHeMC;^oZE_6$1e% WKgzN$52zxXCm?zc1Kll+?T?#s8Y4IW literal 0 HcmV?d00001 From 1eb9717da84635d4870af82474a50286681d7b62 Mon Sep 17 00:00:00 2001 From: JudeSafo Date: Sat, 26 Mar 2022 21:55:30 -0700 Subject: [PATCH 2/2] digital-copyright to verify authenticity of your soureccode and halt forgery in the event of a software supply chain attack --- opengs-digital-copyright.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/opengs-digital-copyright.txt b/opengs-digital-copyright.txt index 93bfc8e..e71a750 100644 --- a/opengs-digital-copyright.txt +++ b/opengs-digital-copyright.txt @@ -1 +1 @@ -Instructions:\n/nhash: QmedrV35hYisKPHm328bRkycRd4uc6vV7U7u5gqtnBSnW5\nbrowser: https://gateway.ipfs.io/ipfs/ QmedrV35hYisKPHm328bRkycRd4uc6vV7U7u5gqtnBSnW5/nmotivation: The presidential executive order, March, 2021 requires all software sold to the government to show a traceable dependency tree. Your hash resides on the filecoin blockchain node at the address given above. You can verify authenticity by comparing with the private key encrypted in your source code ... +Instructions:\n/nhash: \nbrowser: https://gateway.ipfs.io/ipfs//nmotivation: The presidential executive order, March, 2021 requires all software sold to the government to show a traceable dependency tree. Your hash resides on the filecoin blockchain node at the address given above. You can verify authenticity by comparing with the private key encrypted in your source code ...