From 0a39225eea13a3ed512d068414efa85700b0612c Mon Sep 17 00:00:00 2001 From: inference Date: Mon, 29 Jan 2024 21:41:25 +0000 Subject: [PATCH] Remove duplicate IDs IDs should not be defined multiple times. Use the `
` elements to define the IDs rather than the headings. --- about.xhtml | 16 +- blog.xhtml | 4 +- blog/foss_is_working_against_itself.xhtml | 14 +- blog/systemd_insecurity.xhtml | 12 +- blog/the_chromium_monopoly.xhtml | 10 +- ...sted_the_issue_with_decentralisation.xhtml | 14 +- changelog.xhtml | 4 +- changelog/firmware-aa000-0.xhtml | 213 +++++++++--------- changelog/firmware-xa000-0.xhtml | 128 ++++++----- changelog/firmware-xb000-0.xhtml | 54 +++-- contact.xhtml | 12 +- directory.xhtml | 4 +- documentation.xhtml | 4 +- documentation/hardened_malloc.xhtml | 16 +- ...openssl_selfsigned_certificate_chain.xhtml | 40 ++-- key.xhtml | 14 +- music.xhtml | 4 +- source.xhtml | 4 +- 18 files changed, 280 insertions(+), 287 deletions(-) diff --git a/about.xhtml b/about.xhtml index 11d26f0..39cd1f2 100644 --- a/about.xhtml +++ b/about.xhtml @@ -1,7 +1,7 @@ - + @@ -29,7 +29,7 @@

About

-

About Me

+

About Me

I am Jake Winters, also known by my pseudonym "Inference", a security researcher based in United Kingdom.
I am the founder, lead developer, and administrator, of Inferencium.
@@ -106,7 +106,7 @@ forward-slash when there is more to the system than only GNU.

-

Date and Time

+

Date and Time

All dates and times across my services are ISO 8601-compliant. The short-form format YYYY-MM-DD is used for dates, and @@ -117,7 +117,7 @@ YYYYMMDDThhmmss-hhmm (with negative offset).

-

Licensing

+

Licensing

I care about upstreaming and sharing code, strongly preferring licenses which have high license compatibility in order to permit sharing code with as many other projects as possible; for this reason, permissive licenses are my @@ -194,7 +194,7 @@ isn't "free", it's not open-source, either.

-

Services

+

Services

This list contains the policies and practices of my services.

My policies and practices are heavily security- and privacy-focused, with improvements made on an ongoing basis as new technologies, protocols, and @@ -246,7 +246,7 @@

-

Recommendations

+

Recommendations

Hardware

Smartphone

@@ -565,7 +565,7 @@
-

Music

+

Music

For a curated list of music I enjoy, visit my music page.

diff --git a/blog.xhtml b/blog.xhtml index 609d606..eae4ad5 100644 --- a/blog.xhtml +++ b/blog.xhtml @@ -1,7 +1,7 @@ - + @@ -29,7 +29,7 @@

Blog

Changelog - Firmware - xa000-0

-
-
-

4.0.0.4

-

Tags:

- -

Changelog (since version 3.0.0.3):

-
    -
  • Update readme
    • -
  • Update WHENCE
    • -
  • Update AMD CPU Family 17h microcode
    • -
  • Update AMD GPU Raven VCN firmware
    • -
-
-
-

3.0.0.3

-

Tags:

- -

Changelog (since version 2.0.0.2):

-
    -
  • Add Realtek RTL8125B NIC firmware
    • -
-
-
-

2.0.0.2

-

Tags:

- -

Changelog (since version 1.0.0.1):

-
    -
  • Update readme
    • -
  • Update Makefile
    • -
  • Update WHENCE
    • -
  • Update check_whence script
    • -
  • Update copy-firmware script
    • -
-
-
-

1.0.0.1

-

Tags:

- -

Changelog (since version 0.0.0.0):

-
    -
  • Update WHENCE
    • -
-
-
-

0.0.0.0

-

Tags:

- -

Changelog:

-
    -
  • Initial release
    • -
-
+
+

4.0.0.4

+

Tags:

+ +

Changelog (since version 3.0.0.3):

+
    +
  • Update readme
    • +
  • Update WHENCE
    • +
  • Update AMD CPU Family 17h microcode
    • +
  • Update AMD GPU Raven VCN firmware
    • +
+
+
+

3.0.0.3

+

Tags:

+ +

Changelog (since version 2.0.0.2):

+
    +
  • Add Realtek RTL8125B NIC firmware
    • +
+
+
+

2.0.0.2

+

Tags:

+ +

Changelog (since version 1.0.0.1):

+
    +
  • Update readme
    • +
  • Update Makefile
    • +
  • Update WHENCE
    • +
  • Update check_whence script
    • +
  • Update copy-firmware script
    • +
+
+
+

1.0.0.1

+

Tags:

+ +

Changelog (since version 0.0.0.0):

+
    +
  • Update WHENCE
    • +
+
+
+

0.0.0.0

+

Tags:

+ +

Changelog:

+
    +
  • Initial release
    • +
diff --git a/changelog/firmware-xb000-0.xhtml b/changelog/firmware-xb000-0.xhtml index 9263142..c6f9aee 100644 --- a/changelog/firmware-xb000-0.xhtml +++ b/changelog/firmware-xb000-0.xhtml @@ -1,7 +1,7 @@ - + @@ -29,38 +29,36 @@

Changelog - Firmware - xb000-0

-
-
-

1.0.0.1

-

Tags:

- -

Changelog (since version 0.0.0.0):

-
    -
  • Update readme
    • -
  • Update WHENCE
    • -
  • Update AMD CPU Family 19h microcode
    • -
  • Update AMD GPU Green Sardine VCN firmware
    • -
-
-
-

0.0.0.0

-

Tags:

- -

Changelog:

-
    -
  • Initial release
    • -
-
+
+

1.0.0.1

+

Tags:

+ +

Changelog (since version 0.0.0.0):

+
    +
  • Update readme
    • +
  • Update WHENCE
    • +
  • Update AMD CPU Family 19h microcode
    • +
  • Update AMD GPU Green Sardine VCN firmware
    • +
+
+
+

0.0.0.0

+

Tags:

+ +

Changelog:

+
    +
  • Initial release
    • +
diff --git a/contact.xhtml b/contact.xhtml index 253da43..0e6a73e 100644 --- a/contact.xhtml +++ b/contact.xhtml @@ -1,7 +1,7 @@ - + @@ -29,7 +29,7 @@

Contact

-

End-to-end Encrypted Contact Methods

+

End-to-end Encrypted Contact Methods

-

Preferred

+

Preferred

Whenever possible, use the following contact methods; they allow verification to mitigate man-in-the-middle attacks, have high security, and reasonable privacy.

@@ -65,7 +65,7 @@
- + @@ -29,7 +29,7 @@

Directory

-

XMPP

+

XMPP

This is a list of XMPP channels hosted by me. Channels branded as Inferencium are run by me. Channels not under Inferencium branding are either run by me or other people, but are hosted on Inferencium servers.

diff --git a/documentation.xhtml b/documentation.xhtml index 3c3970d..89c1d85 100644 --- a/documentation.xhtml +++ b/documentation.xhtml @@ -1,7 +1,7 @@ - + @@ -29,7 +29,7 @@

Documentation

-

Increase Permitted Amount of Memory Pages

+

Increase Permitted Amount of Memory Pages

Add vm.max_map_count = 1048576 to /etc/sysctl.conf to accommodate hardened_malloc's large amount of guard pages.

-

Clone hardened_malloc Source Code

+

Clone hardened_malloc Source Code

$ git clone https://github.com/GrapheneOS/hardened_malloc.git

-

Enter hardened_malloc Local Git Repository

+

Enter hardened_malloc Local Git Repository

$ cd hardened_malloc/

-

Compile hardened_malloc

+

Compile hardened_malloc

$ make <arguments>

CONFIG_N_ARENA=n can be adjusted to increase parallel performance at the expense of memory usage, or decrease memory usage at the @@ -109,11 +109,11 @@ of hardened_malloc's extensive official documentation.

-

Copy Compiled hardened_malloc Library

+

Copy Compiled hardened_malloc Library

# cp out/libhardened_malloc.so <target path>

-

Set System to Preload hardened_malloc on Boot

+

Set System to Preload hardened_malloc on Boot

musl-based systems: Add LD_PRELOAD=<hardened_malloc path> to /etc/environment

diff --git a/documentation/openssl_selfsigned_certificate_chain.xhtml b/documentation/openssl_selfsigned_certificate_chain.xhtml index e10bd51..288cd1d 100644 --- a/documentation/openssl_selfsigned_certificate_chain.xhtml +++ b/documentation/openssl_selfsigned_certificate_chain.xhtml @@ -1,7 +1,7 @@ - + @@ -27,8 +27,8 @@ +

Documentation - OpenSSL Self-signed Certificate Chain

-

Documentation - OpenSSL Self-signed Certificate Chain

This documentation contains the complete set of commands to create a new OpenSSL self-signed certificate chain with V3 subjectAltName (SAN) extensions enabled. Multiple SANs can be included in a certificate by adding each domain as a comma-delimited string. @@ -40,7 +40,7 @@ documentation source code repository.

-

Create Certificate Authority Key

+

Create Certificate Authority Key

openssl genrsa <encryption type> -out <CA key name>.pem <key size>

-

Verify Certificate Authority Key

+

Verify Certificate Authority Key

openssl rsa -noout -text -in <CA key name>.pem

-

Create Certificate Authority Certificate

+

Create Certificate Authority Certificate

openssl req -new -x509 -days <days of validity> -extensions v3_ca -key <CA key name>.pem -out <CA certificate name>.pem

-

Convert Certificate to PEM Format

+

Convert Certificate to PEM Format

openssl x509 -in <CA certificate name>.pem -out <CA certificate name>.pem -outform PEM

-

Verify Certificate Authority Certificate

+

Verify Certificate Authority Certificate

openssl x509 -noout -text -in <CA certificate name>.pem

-

Create Intermediate Certificate Authority Key

+

Create Intermediate Certificate Authority Key

openssl genrsa <encryption type> -out <intermediate CA key name>.pem <key size>

-

Verify Intermediate Certificate Authority Key

+

Verify Intermediate Certificate Authority Key

openssl rsa -noout -text -in <intermediate CA key name>.pem

-

Create Intermediate Certificate Authority Signing Request

+

Create Intermediate Certificate Authority Signing Request

openssl req -new -sha256 -key <intermediate CA key name>.pem -out <intermediate CA certificate signing request name>.pem

-

Create Intermediate Certificate Authority Certificate

+

Create Intermediate Certificate Authority Certificate

openssl ca -config <intermediate CA configuration file> -extensions v3_intermediate_ca -days <days of validity> -notext -md sha256 -in <intermediate CA signing request name>.pem -out <intermediate CA certificate name>.pem

-

Verify Intermediate Certificate Authority Certificate

+

Verify Intermediate Certificate Authority Certificate

openssl x509 -noout -text -in <intermediate CA certificate name>.pem

-

Verify Chain of Trust (CA to Intermediate)

+

Verify Chain of Trust (CA to Intermediate)

openssl verify -CAfile <CA certificate name>.pem <intermediate CA certificate name>.pem

-

Create Server Key

+

Create Server Key

openssl genrsa <encryption type> -out <server key name>.pem <key size>

-

Verify Server Key

+

Verify Server Key

openssl rsa -noout -text -in <server key name>.pem

-

Create Server Certificate Signing Request

+

Create Server Certificate Signing Request

openssl req -new -sha256 -subj "/C=<country>/ST=<state/province>/L=<locality>/O=<organization>/CN=<common name>" -addext "subjectAltName = DNS.1:<alternative DNS entry>" -key <server key name>.pem -out <server certificate signing request name>.pem

-

Create Server Certificate

+

Create Server Certificate

openssl x509 -sha256 -req -days <days of validity> -in <server certificate signing request name>.pem -CA <intermediate CA certificate name>.pem -CAkey <intermediate CA key name>.pem -extensions SAN -extfile <(cat /etc/ssl/openssl.cnf <(printf "\n[SAN]\nsubjectAltName=DNS.1:")) -out <server certificate name>.pem

-

Verify Server Certificate

+

Verify Server Certificate

openssl x509 -noout -text -in <server certificate name>.pem

-

Verify Chain of Trust (Intermediate to Server)

+

Verify Chain of Trust (Intermediate to Server)

openssl verify -CAfile <intermediate CA certificate name>.pem <server certificate>.pem

diff --git a/key.xhtml b/key.xhtml index 67d4e71..1b197d0 100644 --- a/key.xhtml +++ b/key.xhtml @@ -1,7 +1,7 @@ - + @@ -29,7 +29,7 @@

Key

-

Notes

+

Notes

  • You can also find my keys on GitHub @@ -78,9 +78,9 @@
-

End-to-end Encrypted Contact Methods

+

End-to-end Encrypted Contact Methods

-

XMPP

+

XMPP

Updated: 2023-01-13 (UTC+00:00)

Whenever possible, open the links to pin the fingerprints directly from this webpage; if that is not possible, manually verify the @@ -101,9 +101,9 @@

-

File/Git Signing

+

File/Git Signing

-

SSH

+

SSH

Updated: 2023-07-27 (UTC+00:00)

Each SSH key is signed by the previous key, allowing verification of the chain of keys, and root of trust.

diff --git a/music.xhtml b/music.xhtml index 9a07f48..9051366 100644 --- a/music.xhtml +++ b/music.xhtml @@ -1,7 +1,7 @@ - + @@ -28,7 +28,7 @@

Music

-
+

This is a curated list of my personally-enjoyed music. The list is alphabetically-sorted A-Z, based on artist name, followed by track name, and is formatted as ARTIST - TRACK. Each item in the list has its own individual diff --git a/source.xhtml b/source.xhtml index 900256f..1e0df62 100644 --- a/source.xhtml +++ b/source.xhtml @@ -1,7 +1,7 @@ - + @@ -29,7 +29,7 @@

Source