diff --git a/about.xhtml b/about.xhtml index f623314..56ac922 100644 --- a/about.xhtml +++ b/about.xhtml @@ -1,7 +1,7 @@ - + @@ -179,7 +179,7 @@

Licensing

I care about upstreaming and sharing code, strongly preferring licenses which have high license compatibility in order to permit sharing code with as many other projects as possible; for this - reason, permissive licenses are mypreferred choice, while avoiding copyleft licenses and other + reason, permissive licenses are my preferred choice, while avoiding copyleft licenses and other licenses which place restrictions on how my code may be used, and prevent me from including important proprietary code, such as firmware, which can patch security vulnerabilities, privacy issues, and stability issues.

@@ -201,9 +201,9 @@

BSD 3-Clause License

SPDX License Identifier: BSD-3-Clause

-

Type: Permissive

+

Type: Permissive

BSD 3-Clause License - is a highly permissive license which allows content licensed under it to be used in + is a highly-permissive license which allows content licensed under it to be used in any way, whether in source or binary form, and allows sublicensing under a different license, with the only restrictions being the original copyright notice must be kept in order to attribute the original creator of the licensed content, and the name of @@ -213,7 +213,7 @@

GNU General Public License v2.0

SPDX License Identifier: GPL-2.0-only

-

Type: Copyleft

+

Type: Copyleft

GNU General Public License v2.0 is a strong copyleft license which restricts use of content licensed under it by requiring all source code of the content to be publicly available, making @@ -235,7 +235,7 @@

Creative Commons Attribution 4.0 International

SPDX License Identifier: CC-BY-4.0

-

Type: Permissive

+

Type: Permissive

Creative Commons Attribution 4.0 International is a highly-permissive license which allows content licensed under it to be used in any way, in any medium, with the only restriction being the original copyright @@ -274,39 +274,40 @@ a period, then the version of that phase; for example, -alpha.n for an alpha version, -beta.n for a beta version, and -rc.n for a release candidate version, with - n being a non-negative integer. Stable versions have no suffix.

+ n being a positive integer beginning at 1. Stable versions have no + suffix.

What Are the Phases?

There are 4 phases of development. Each phase typically has its own branch in each source code repository. The phases are as follows:

    -
  1. Alpha: Pre-alpha development and alpha testing occurs in this phase. Features - are added, modified, and/or removed. Fixes and optimisations may also occur if they - are caught during this phase. This is where the majority of changes occur and where - the fine-grained commits can be found. Breakage is highly likely within this phase - as it makes no attempt to be stable or usable due to being where the most rapid - development occurs. Code is tested internally in a fine-grained manner and is moved - to the next phase only when it is deemed feature-complete and reasonably stable for - broader public testing. If you would like to assist in testing code in this phase, - you must use the code and/or tags from the source code repositories due to it not - being available publicly outside of them.
    2. -
  2. Beta: Feature-complete testing occurs in this phase. Only bug fixes and +
  3. Alpha: Pre-alpha development and alpha-testing occurs in this phase. + Features are added, modified, and/or removed. Fixes and optimisations may also occur + if they are caught during this phase. This is where the majority of changes occur + and where the fine-grained commits can be found. Breakage is highly likely within + this phase as it makes no attempt to be stable or usable due to being where the most + rapid development occurs. Code is tested internally in a fine-grained manner and is + moved to the next phase only when it is deemed feature-complete and reasonably + stable for broader public testing. If you would like to assist in testing code in + this phase, you must use the code and/or tags from the source code repositories due + to it not being available publicly outside of them.
    4. +
  4. Beta: Feature-complete testing occurs in this phase. Only bug fixes and optimisations occur in this phase, such as stability and security fixes. This phase is classified as stable enough for broad public testing and is made available publicly in many cases without having to use the source code repositories. Since this phase contains only feature-complete code, no features will be added, modified, or removed in this phase.
    5. -
  5. Release candidate (RC): Feature-complete testing occurs in this phase. Code in - the RC phase is often stable enough for production usage, but is not yet completely - acceptable to be classified as stable by my standards. This phase is often skipped - due to most bugs being caught in the beta phase, but will be used should the need - arise for finer-grained testing beyond what the beta phase can provide. Like the - beta phase, code in this phase is available publicly without requiring usage of the - source code repositories.
    6. -
  6. Stable: Feature-complete and well-tested code is moved to this phase. Code in - this phase is deemed to be stable enough for production usage and full support is - provided.
    7. +
  7. Release candidate (RC): Feature-complete testing occurs in this phase. + Code in the RC phase is often stable enough for production usage, but is not yet + completely acceptable to be classified as stable by my standards. This phase is + often skipped due to most bugs being caught in the beta phase, but will be used + should the need arise for finer-grained testing beyond what the beta phase can + provide. Like the beta phase, code in this phase is available publicly without + requiring usage of the source code repositories.
    8. +
  8. Stable: Feature-complete and well-tested code is moved to this phase. + Code in this phase is deemed to be stable enough for production usage and full + support is provided.

When development of a new version has begun, the code within the alpha phase is rebased onto the most recent code from the stable phase before work commences. This cycle continues @@ -316,8 +317,9 @@

Services

This list contains the policies and practices of my services.

-

My policies and practices are heavily security- and privacy-focused, with improvements made on an - ongoing basis as new technologies, protocols, and software become available.

+

My policies and practices are heavily security-focused and privacy-focused, with improvements + made on an ongoing basis as new technologies, hardware, software, and protocols become + available.

Websites

  • Unnecessary logging avoided (only logs required for security and debugging @@ -332,8 +334,8 @@ ciphers are used, along with forward secrecy
  • All connections made via high-security AEAD ciphers, preferring AES-256-GCM for - devices with AES hardware acceleration, and ChaCha20-Poly1305 for devices without AES - hardware acceleration, with AES-128-GCM as a fallback (AES-128-GCM is mandated for TLS + devices with AES hardware-acceleration, and ChaCha20-Poly1305 for devices without AES + hardware-acceleration, with AES-128-GCM as a fallback (AES-128-GCM is mandated for TLS 1.3 by IETF RFC8446 section 9.1)
  • All connections are made via high-security key exchange protocols, preferring @@ -377,16 +379,19 @@ Type Hardware Description - Source model
    - (License) + +

    Source model

    +

    (SPDX License Identifier)

    + Smartphone - Front and rear view of a Google Pixel 8 Pro in Obsidian colour
    - Google Pixel + Front and rear view of a Google Pixel 8 Pro in Obsidian colour + Google Pixel +
    Security/Privacy

    Google Pixel devices are the best Android devices @@ -457,7 +462,10 @@

    Pixel 8-series is supported for a minimum of 7 years from launch.

    - + +

    Proprietary

    +

    (NONE)

    + @@ -481,19 +489,22 @@ Type Software Description - Source model
    - (License) + +

    Source model

    +

    (SPDX License Identifier)

    + Operating system - Gentoo Linux logo
    - Gentoo Linux + Gentoo Linux logo + Gentoo Linux +

    Gentoo Linux - is a highly modular, source-based, Linux-based operating system + is a highly-modular, source-based, Linux-based operating system which allows vast customisation to tailor the operating system to suit your specific needs. There are many advantages to such an operating system, with the most notable being the ability to @@ -512,17 +523,42 @@ configuration respository.

    - Open-source
    - (GPL-2.0-only) +

    Open-source

    +

    (GPL-2.0-only)

    + + + + C Standard Library + + musl logo + musl + + +

    musl + is a lightweight C standard library which aims to be correct, + standards-compliant, and safe. Unlike + glibc, + it greatly conforms to POSIX standards, deviating very little + by keeping its own non-standard extensions to a minimum, and + takes care to not break such conformity.

    +

    Also unlike glibc, due to its lightweight and + standards-compliant design, musl is portable and well-suited for + use in any system, whether desktop, server, or embedded.

    + + +

    Open-source

    +

    (MIT)

    + Web browser - Chromium logo
    - Chromium + Chromium logo + Chromium +

    Chromium - is a highly secure web browser which is often ahead of other web + is a highly-secure web browser which is often ahead of other web browsers in security aspects. It has a dedicated security team and a very impressive security brag sheet. @@ -535,14 +571,16 @@ control-flow integrity (CFI).

    - Open-source
    - (BSD-3-Clause) +

    Open-source

    +

    (BSD-3-Clause)

    + Version Control - Git logo
    - Git + Git logo + Git +

    Git is highly-flexible and feature-rich version control software @@ -552,22 +590,24 @@ client-server model or peer-to-peer.

    - Open-source
    - (GPL-2.0-only) +

    Open-source

    +

    (GPL-2.0-only)

    + - Gitea logo
    - Gitea + Gitea logo + Gitea +

    Gitea - is a self-hosted, all-in-one development platform with Git - hosting, code review, team collaboration, package registry and - CI/CD.

    + is an all-in-one development platform with Git hosting, code + review, team collaboration, package registry and CI/CD.

    - Open-source
    - (MIT) +

    Open-source

    +

    (MIT)

    + @@ -588,8 +628,10 @@ Type Software Description - Source model
    - (License) + +

    Source model

    +

    (SPDX License Identifier)

    + @@ -611,7 +653,12 @@ hardened kernel, hardened memory allocator (hardened_malloc) - to protect against common memory corruption vulnerabilities, + to protect against common heap memory corruption vulnerabilities + and reduce the lifetime of data in memory due to + zero-initialising memory on it being freed, Arm's Memory Tagging + Extension to provide protection against heap memory bugs such as + use-after-free and buffer overflow (MTE-supporting devices + only), hardened Bionic standard C library, stricter SELinux policies, and local and remote hardware-backed attestation @@ -624,12 +671,12 @@ overall high-security practices.

    For an extensive list of features GrapheneOS provides, visit its - official features list - which provides extensive documentation.

    + official features list.

    - Open-source
    - (MIT) +

    Open-source

    +

    (MIT)

    + Web browser @@ -640,7 +687,7 @@

    Vanadium is a security-hardened, privacy-hardened, Chromium-based web browser which utilises GrapheneOS' operating system hardening to implement stronger defenses to the already - very secure Chromium web browser.

    + very-secure Chromium web browser.

    Its hardening alongside Chromium's base security features includes disabling JavaScript just-in-time (JIT) compilation by default, @@ -652,8 +699,9 @@ official repository.

    - Open-source
    - (GPL-2.0-only) +

    Open-source

    +

    (GPL-2.0-only)

    + Messenger @@ -675,15 +723,16 @@

    Molly is available in 2 flavours:

      -
    • Molly, which includes the same proprietary Google +
    • Molly: Includes the same proprietary Google code as Signal to support more features
      • -
    • Molly-FOSS, which removes the proprietary Google +
    • Molly-FOSS: Removes the proprietary Google code to provide an entirely open-source client
    - Open-source
    - (GPL-3.0-only) +

    Open-source

    +

    (AGPL-3.0-only)

    + @@ -695,10 +744,37 @@ XMPP client which serves as the de facto XMPP reference client and has great usability.

    +

    It supports the latest and most important XMPP extensions + (XEPs), including, but not limited to:

    + - Open-source
    - (GPL-3.0-only) +

    Open-source

    +

    (GPL-3.0-only)

    + Viewer @@ -714,8 +790,24 @@ individual image and video file view, and folder view.

    - Open-source
    - (Apache-2.0) +

    Open-source

    +

    (Apache-2.0)

    + + + + Calculator + + OpenCalc logo
    + OpenCalc + +

    OpenCalc + is a simple, lightweight calculator with optional scientific + features.

    + + +

    Open-source

    +

    (GPL-3.0-only)

    +