GPG encrypted blog posts for privacy?

oui

I have just recently started to learn more about privacy and encryption and was wondering whether or not the following idea would be considered stupid/pointless.

I'm planning on starting a blog under my real name. However, I'm concerned over internet bots and web crawlers collecting meta data around my thoughts.

So, I would like to make sure only humans could read certain blog posts. I'd figure since the recipient is everyone reading the blog post, would just something like gpg2 --armor --sign secret.txt be enough? I would then just post the ASCII output of the gpg signed file onto my blog which then the reader could just copy-paste and use my public GPG key to decrypt.

Let me know what you guys think. 😁

rvp

oui Heh. If you require the use of gpg you'll also lose readers, mate.

I would recommend:
a) Some kind of IFF scheme like captchas (no shame in using CloudFlare or Google)
b) JavaScrypt (Let 'em register; hand out a passphrase; correctly typed in, decrypt the page in the browser).

oui

rvp

Thanks for stopping by, appreciate your input 🙌

rvp Heh. If you require the use of gpg you'll also lose readers, mate.

I'm afraid so, but a risk I'm willing to take. The 5% of my blog posts that are going to get encrypted is just me expressing my deep and dark passions for thonkpads anyways 😉

As for using captchas, my site is going to be as complete bare-bones and minimal as possible, good ol' plain html/css with 1 http request per page and no javascript etc.

JavaScrypt sounds interesting though, might consider it for another project - thanks for the heads-up!

oui

oui good ol'

pin Good ol'

pickles good old

rvp good ol'

Good old good ol' y'all

yeti

So every reader gets the same password or key?
That will leak. Someone will play meanie, just to prove being possible to do so.

One key per reader?
Someone will get an account for your blog just to bust it.

To be safe, always bet on the dark side of humans!

Stuff that needs protection does not belong in the nets!

oui

yeti

yeti So every reader gets the same password or key?

Yes, one public GPG key.

yeti That will leak. Someone will play meanie, just to prove being possible to do so.

The point is to protect the content from bots and web crawlers etc. Not worried about other people having access to the content. Starting to get paranoid of the direction AI and machine learning is heading in correlation to data mining. I'm still new to this area so I'm not sure what other damage could be done by having a leaked public GPG key other than that other people just gets access to read the encrypted blog posts.

yeti To be safe, always bet on the dark side of humans!

Stuff that needs protection does not belong in the nets!

Strongly agree with this, thanks!

rvp

yeti That will leak. Someone will play meanie, just to prove being possible to do so.
...
Someone will get an account for your blog just to bust it.

Which is why this board is such a wretched hive of scum & villainy, right? 😁 No, I'm kidding.

One low-tech scheme I have is to take a random word from a dictionary each day and encrypt the site contents with it. Then, use a TTS engine on the same word and post that on the site. Users play the sample and type in the word and the text gets decrypted.

Problem is: a) English is not everybody's native language (think of the day's word being corollary or lollapalooza and the user being Japanese: no blog post for you today, mōshiwake gozaimasu) and b) hearing-impaired people (like heavy-metal fans)

pickles

oui

oui The point is to protect the content from bots and web crawlers etc

what about good old rot13? (plus a robots.txt for the behaving bots)

rvp This is weird mate, just yesterday I thought about lollapalooza, Porno for Pyros and Perry Farrell.

The Good ol' days.

I hope you don't have mindreading abilities also 🥶

rvp

pin I hope you don't have mindreading abilities also

No supernatural talent whatsoever.

And no Porno for Pyros either--never heard them, actually. I liked both of Jane's Addiction's first 2 albums though; and most of RHCP's early output.

rvp Jane's AddIction were great and I still remember buying RHCP Higher Ground 😄

Maybe we should dig deeper in the box, I'm the man in the box 😉

rvp

pin I'm the man in the box

I was more a fan of Temple of the Dog than AIC, but, that album I liked. About good ol' days, though, I don't know: pimples & angst; hormones & horniness...

oui

pickles

pickles what about good old rot13?

Didn't know about rot13, looks really interesting - thanks! Though, would I be too paranoid to think that future bots with the help of machine learning could detect such letter-playing patterns and decrypt the content before collecting it?

rvp

oui future bots with the help of machine learning could detect such letter-playing patterns and decrypt the content

rot13 can be broken using just pencil and paper. See caesar(6). Code written back in 1982...

oui

rvp Wow, that escalated quickly 🤣

yeti

rvp

Rot26 then? o;-)

rvp

yeti You mean the stuff they apply to (some) textbooks? Very effective! Certain chapters I've still not managed to decrypt!