How to verify PGP digital signatures using GnuPG on macOS

[@QuarKSonTV]

Can't wait for Linux videos

[@afonsosalbrecht]

me neither.... it's such a pain in the neck to watch those great videos and then know that's macOS (s#it)

[@tamagnopesqueira8189]

Awesome video, keep up with the amazing work, and thank you for sharing your knowledge with the community =)

[@sunknudsen]

Thanks for the push and pleasure!

[@kostiantynkarzhanov9216]

Awesome video! Super helpful!

[@ChrisLeonard0]

just discovered you through reddit r/private. liking what you are doing.

[@fms6306]

Love your content sun. Great work.

[@ale03068]

5:59 ok I'm tuned

[@sunknudsen]

Amazing comment... haha

[@poojanpandya8864]

me, too!

[@pasjouwbuis1301]

Thanks for this explanation. One thing I don't really understand. In order to verify downloaded software, I first need to install some other software (like Homebrew and GnuPG). How do I know that this software (to verify other software) is safe?

[@tam5126]

I have been wondering the same. I ran the command and it seemed to do a bit more than I was expecting. How do you verify HomeBrew?

[@itsmejeremy7]

@@tam5126 im wondering the exact same thing as Im going through this right now myself as well

[@Juliozz3]

Great video! There are also gpg GUI applications like Kleopatra on Windows for those who are not too familiar with the console

[@sunknudsen]

Thanks for sharing Julio!

[@learn_with_gurpreet]

I like the way you forget words while speaking, I can relate to it... ;)

[@erikskywalker5331]

I just want to verify software using GPG Keychain and there are no options to do so with a signature. Must this process be accomplished via terminal? Also how are PGP, GPG, and GnuPG differentiated? The terminology seems needlessly convoluted.

[@acetv392]

Great video

[@danielknights]

Thanks for the very informative video.

[@johnm8693]

Very helpful!

[@itsmejeremy7]

Hi! Thanks for the great video! I am having an issue in terminal with the command "brew analytics off". Any help would be greatly appreciated! I am also wondering if I need to have the brew analytics off for security.. Thanks!

[@comanmatei3210]

The lesson in this video is extraordinarily important, as well as a basic lesson found in the first chapter of the book "Kali Linux Revealed: Mastering the Penetration Testing Distribution" (there is also a revised 2021 edition by one of the authors of the book Raphael Hertzog). you tell us in the next video with reference to this video, that it did not capture the public's attention, believe me that this video reached exactly the most technical part of the followers and I want to congratulate them and greet them✌️ a question: Do you think a Slack channel or a Discord server would be a good idea for those on this channel? or a better alternative?

[@cbedry]

at around the 6:12 mark, what is the command to run to update to the latest version of GNUPG???

[@ve4154]

Good vid!

[@tehutiaferti6243]

Do you have the same vid, but for Linux/Ubuntu?

[@sunknudsen]

Unfortunately I don’t. That said, once GnuPG is installed (sudo apt install gnupg), process is very similar.

[@Mrkukivu]

I like the way you looked at your yubikey at 12:18

[@Saucyserg86]

Hey what’s up don’t know if you got my email but anyway you said something in the vid about auditing code, idea popped in my head why don’t you audit DeFi protocols I would feel better about going into platforms just an idea keep up the good work I’m learning a lot thanks

[@lucianoverdicchio]

Hi thanks for your video,. I've got a problem when I launch "brew install gnupg" the terminal returns this "Error: No similarly named formulae found. Error: No available formula or cask with the name "gnupg". ==> Searching for a previously deleted formula (in the last month)... Error: No previously deleted formula found. ==> Searching taps on GitHub... Error: No formulae found in taps. " Have you some idea to help me, please?

[@sunknudsen]

Hey Luciano, very strange... according to formulae.brew.sh/formula/gnupg#default, "brew install gnupg" should work. Have you tried updating brew?

[@lucianoverdicchio]

@@sunknudsen I uninstalled brew and the I reinstall it, but nothing same error...

[@itsmejeremy7]

@@lucianoverdicchio try just typing "install gnupg" after I installed brew I kept attempting the command "brew install gnupg" and nothing happened and then I tried just "install gnupg" and it seemed to have ran correctly, maybe give that a shot and see if it works for you as well.

[@wznzgq1354]

can you finally make episode how to set up yubikey on tails and put keys there? i can't find it on your channel even tho you mention it in every other video. thanks great content

[@adoracameron6341]

Thank you for the information that really helpful and you need videos also how to install drivers on Linux

[@sunknudsen]

Thanks for sharing your feedback. Curious, aren't there many channels out there that cover topics such as installing drivers on Linux?

[@luzidd7414]

what kind of driver do you need to install? i use Linux full time and never install drivers since they come with the kernel

[@adoracameron6341]

@@sunknudsen not many channels provide those information

[@adoracameron6341]

@@luzidd7414 running application in the terminal

[@luzidd7414]

@@adoracameron6341 I don't understand what u mean with that

[@Didi-jo5gr]

Nice Video, please more of that! What Firefox Theme are you using?

[@sunknudsen]

Thanks for the push! addons.mozilla.org/en-US/firefox/addon/arc-dark-theme-we/?.mozilla.org&

[@Didi-jo5gr]

@@sunknudsen Thank you very much 👌

[@tothemoon8465]

THX FOR AMAZING CONTENT!! Question: What if the hacker just changes the app itself, not the signature. How to verify the actual app??

[@bcol127]

You mentioned the scenario of someone replacing the sh file on your website - is there anything stopping them from uploading a new (bad) key too? I noted that this is also hosted on your site.

[@sunknudsen]

Hey Billy, thanks for asking... This section of the episode answers your question (although admittedly, perhaps my explanation wasn't clear enough). Let me now! kzbin.info/www/bejne/jZ-xl6ikeq-Xh7s

[@bcol127]

@@sunknudsen Ha, I commented before watching the whole thing. Your explanation was clear 🙂

[@uber354]

So how will we know that the PGP private keys haven't been compromised? Impossible

[@bon10101]

Sun what do you think of keybase.io? it is a way of linking different sources of the pgp key holder in one place to verify easily. This replaces having to DDG all over the place.

[@sunknudsen]

Thanks for sharing Sean. Do you have an example of that one place used to verify someone's cryptographic identity?

[@sophiegadoury]

🤯!!!!

[@bloomerjj]

"Jesus", how do we verify the authenticity of Firefox? As always, great content here.

[@arshad5850]

Please make a video on how to verify darknet websites using PGP?

[@BadrHashem]

why I am so stupid here,, I watch the video 3 times

[@scottvrosenfeld]

??? HUH ???

[@user-xl5kd6il6c]

you would have more views if you did less videos related to Apple/MacOS

[@afonsosalbrecht]

use this comment to give another like because I wanted to click on the like button MULTIPLE times.