From dba0b18bc84822385a7b7e9350c4ada301fcb1ae Mon Sep 17 00:00:00 2001
From: inference
Date: Fri, 12 Jan 2024 08:02:13 +0000
Subject: [PATCH] Switch from HTML to XHTML
XHTML provides strict parsing checks to enforce XML compliance, unlike
HTML which will allow broken code to load. Code-correctness will
substantially increase with this change.
---
about.html => about.xhtml | 81 +++++++++----------
blog.html | 53 ------------
blog.xhtml | 53 ++++++++++++
...l => foss_is_working_against_itself.xhtml} | 28 +++----
...security.html => systemd_insecurity.xhtml} | 40 +++++----
...opoly.html => the_chromium_monopoly.xhtml} | 26 +++---
...ted_the_issue_with_decentralisation.xhtml} | 28 +++----
changelog.html | 42 ----------
changelog.xhtml | 42 ++++++++++
...constellation.html => constellation.xhtml} | 26 +++---
...re-aa000-0.html => firmware-aa000-0.xhtml} | 26 +++---
...re-xa000-0.html => firmware-xa000-0.xhtml} | 26 +++---
...re-xb000-0.html => firmware-xb000-0.xhtml} | 26 +++---
.../{planetarium.html => planetarium.xhtml} | 26 +++---
contact.html => contact.xhtml | 42 +++++-----
directory.html => directory.xhtml | 30 +++----
documentation.html | 42 ----------
documentation.xhtml | 42 ++++++++++
...ened_malloc.html => hardened_malloc.xhtml} | 38 ++++-----
...penssl_selfsigned_certificate_chain.xhtml} | 34 ++++----
index.html | 31 -------
index.xhtml | 31 +++++++
key.html => key.xhtml | 37 ++++-----
music.html => music.xhtml | 26 +++---
source.html => source.xhtml | 26 +++---
25 files changed, 446 insertions(+), 456 deletions(-)
rename about.html => about.xhtml (94%)
delete mode 100644 blog.html
create mode 100644 blog.xhtml
rename blog/{foss_is_working_against_itself.html => foss_is_working_against_itself.xhtml} (92%)
rename blog/{systemd_insecurity.html => systemd_insecurity.xhtml} (77%)
rename blog/{the_chromium_monopoly.html => the_chromium_monopoly.xhtml} (87%)
rename blog/{untrusted_the_issue_with_decentralisation.html => untrusted_the_issue_with_decentralisation.xhtml} (91%)
delete mode 100644 changelog.html
create mode 100644 changelog.xhtml
rename changelog/{constellation.html => constellation.xhtml} (57%)
rename changelog/{firmware-aa000-0.html => firmware-aa000-0.xhtml} (87%)
rename changelog/{firmware-xa000-0.html => firmware-xa000-0.xhtml} (81%)
rename changelog/{firmware-xb000-0.html => firmware-xb000-0.xhtml} (69%)
rename changelog/{planetarium.html => planetarium.xhtml} (57%)
rename contact.html => contact.xhtml (70%)
rename directory.html => directory.xhtml (83%)
delete mode 100644 documentation.html
create mode 100644 documentation.xhtml
rename documentation/{hardened_malloc.html => hardened_malloc.xhtml} (81%)
rename documentation/{openssl_selfsigned_certificate_chain.html => openssl_selfsigned_certificate_chain.xhtml} (88%)
delete mode 100644 index.html
create mode 100644 index.xhtml
rename key.html => key.xhtml (82%)
rename music.html => music.xhtml (74%)
rename source.html => source.xhtml (71%)
diff --git a/about.html b/about.xhtml
similarity index 94%
rename from about.html
rename to about.xhtml
index 00e3aae..4f11152 100644
--- a/about.html
+++ b/about.xhtml
@@ -1,13 +1,13 @@
-
+
-
+
@@ -16,16 +16,16 @@
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
About
@@ -70,8 +70,8 @@
I am Jake Winters, also known by my pseudonym "Inference", a security
- researcher based in United Kingdom.
- I am the founder, lead developer, and administrator, of Inferencium.
+ researcher based in United Kingdom.
+ I am the founder, lead developer, and administrator, of Inferencium.
All opinions are my own, and are not necessarily shared with projects or people
I am affiliated with.
I write about my research and experience in cybersecurity and also physical
@@ -79,18 +79,18 @@
about other aspects of my life.
I am an open source advocate for the preservation and modifiability of source
code. I believe source code should be considered human knowledge as much as past
- knowledge and teachings were; it is how modern humanity survives and runs.
+ knowledge and teachings were; it is how modern humanity survives and runs.
Source code being modifiable allows it to be adapted for use by anyone, whether
to add features, harden it for increased security and/or privacy, or provide
- accessibility for disabled users.
+ accessibility for disabled users.
I am also a modular design advocate for the ability to securely and robustly
make changes to hardware and software without the entire system being
affected.
I run multiple XMPP channels; a directory of channels can be found on the
- directory
+ directory
webpage.
If you wish to contact me for any reason, you can use my
- contact methods .
+ contact methods .
It's just Linux. GNU is completely unrelated to Linux, which is a
kernel developed by Linus Torvalds. Linux can be used entirely without
@@ -153,7 +153,7 @@
specified in the SPDX license identifier), and requiring
the original copyright notice to be kept in order to
attribute the original creator of the licensed
- content.
+ content.
Due to the restrictive and invasive nature of this
license, it is avoided unless such restrictions would be
beneficial to my code; whenever this is the case, the
@@ -202,11 +202,11 @@
hardware-acceleration, and ChaCha20-Poly1305 for devices without
AES hardware-acceleration, with AES-128-GCM as a fallback
(AES-128-GCM is mandated for TLS 1.3 by
- IETF RFC8446 section 9.1 )
+ IETF RFC8446 section 9.1 )
Referrer headers disabled to prevent knowing where a user
@@ -230,13 +230,13 @@
Type
Hardware
Description
- Source model
+ Source model
(License)
Smartphone
-
+
Google Pixel
@@ -320,7 +320,7 @@
minimum of 3 years from launch .
Pixel 6-series, Pixel 7-series, Pixel
Fold, and Pixel Tablet, are supported for a
- minimum of 5 years from launch .
+ minimum of 5 years from launch .
Pixel 8-series is supported for a
minimum of 7 years from launch ,
putting it on the same support level as
@@ -341,13 +341,13 @@
Type
Software
Description
- Source model
+ Source model
(License)
Operating system
-
+
Gentoo Linux
@@ -370,18 +370,18 @@
and GrapheneOS'
hardened_malloc
memory allocator.
- You can find my Gentoo Linux configurations in my
+ You can find my Gentoo Linux configurations in my
configuration respository .
- Open-source
+ Open-source
(GPL-2.0-only)
Web browser
-
+
Chromium
@@ -398,7 +398,7 @@
memory hardening, and
control-flow integrity (CFI) .
- Open-source
+ Open-source
(BSD-3-Clause)
@@ -411,14 +411,13 @@
Type
Software
Description
- Source model
+ Source model
(License)
Operating system
-
-
+
GrapheneOS
@@ -456,14 +455,14 @@
which provides extensive documentation.
- Open-source
+ Open-source
(MIT)
Web browser
-
+
Vanadium
@@ -481,14 +480,14 @@
patch-set, can be found in its
official repository .
- Open-source
+ Open-source
(GPL-2.0-only)
Messenger
-
+
Molly
@@ -516,13 +515,13 @@
- Open-source
+ Open-source
(GPL-3.0-only)
-
+
Conversations
@@ -533,7 +532,7 @@
client and has great usability.
- Open-source
+ Open-source
(GPL-3.0-only)
@@ -543,7 +542,7 @@
diff --git a/blog.html b/blog.html
deleted file mode 100644
index cf23e9c..0000000
--- a/blog.html
+++ /dev/null
@@ -1,53 +0,0 @@
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- Inferencium - Blog
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- Blog
-
-
-
- 2022-12-20
-
- 2022-06-30
-
- 2022-01-29
-
- 2022-01-27
-
-
-
-
-
diff --git a/blog.xhtml b/blog.xhtml
new file mode 100644
index 0000000..3ce93a6
--- /dev/null
+++ b/blog.xhtml
@@ -0,0 +1,53 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Inferencium - Blog
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Blog
+
+
+
+ 2022-12-20
+
+ 2022-06-30
+
+ 2022-01-29
+
+ 2022-01-27
+
+
+
+
+
diff --git a/blog/foss_is_working_against_itself.html b/blog/foss_is_working_against_itself.xhtml
similarity index 92%
rename from blog/foss_is_working_against_itself.html
rename to blog/foss_is_working_against_itself.xhtml
index b1b9ac0..f8bbf71 100644
--- a/blog/foss_is_working_against_itself.html
+++ b/blog/foss_is_working_against_itself.xhtml
@@ -1,13 +1,13 @@
-
+
-
+
@@ -16,23 +16,23 @@
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
Blog - #0
FOSS is Working Against Itself
Posted: 2022-01-27 (UTC+00:00)
Updated: 2023-10-31 (UTC+00:00)
-
+
-
+
The world has become a dangerous, privacy invading, human rights stripping,
totalitarian place; in order to combat this, people are joining a growing, and
dangerous, trend, which I will refer to in this post as the "Free and Open
diff --git a/blog/systemd_insecurity.html b/blog/systemd_insecurity.xhtml
similarity index 77%
rename from blog/systemd_insecurity.html
rename to blog/systemd_insecurity.xhtml
index 0af1b1e..57544fd 100644
--- a/blog/systemd_insecurity.html
+++ b/blog/systemd_insecurity.xhtml
@@ -1,13 +1,13 @@
-
+
-
+
@@ -16,23 +16,23 @@
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
Blog - #1
systemd Insecurity
Posted: 2022-01-29 (UTC+00:00)
Updated: 2023-10-31 (UTC+00:00)
-
+
- "Yes, as you found out "0day" is not a valid username. I wonder
+ "Yes, as you found out "0day" is not a valid username. I wonder
which tool permitted you to create it in the first place. Note that not
permitting numeric first characters is done on purpose: to avoid ambiguities
- between numeric UID and textual user names.
-
- systemd will validate all configuration data you drop at it, making it hard to
+ between numeric UID and textual user names.
+ systemd will validate all configuration data you drop at it, making it hard to
generate invalid configuration. Hence, yes, it's a feature that we don't permit
invalid user names, and I'd consider it a limitation of xinetd that it doesn't
- refuse an invalid username.
-
- So, yeah, I don't think there's anything to fix in systemd here. I understand
- this is annoying, but still: the username is clearly not valid."
+ refuse an invalid username.
+ So, yeah, I don't think there's anything to fix in systemd here. I understand
+ this is annoying, but still: the username is clearly not valid."
- Lennart Poettering, systemd lead developer
My thoughts: systemd was the thing that allowed root access just because a
username started with a number, then Poettering blamed the user.
diff --git a/blog/the_chromium_monopoly.html b/blog/the_chromium_monopoly.xhtml
similarity index 87%
rename from blog/the_chromium_monopoly.html
rename to blog/the_chromium_monopoly.xhtml
index 3359605..9481f92 100644
--- a/blog/the_chromium_monopoly.html
+++ b/blog/the_chromium_monopoly.xhtml
@@ -1,13 +1,13 @@
-
+
-
+
@@ -16,23 +16,23 @@
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
Blog - #3
The Chromium Monopoly
Posted: 2022-12-20 (UTC+00:00)
Updated: 2023-11-11 (UTC+00:00)
-
+
Introduction
Solution
diff --git a/blog/untrusted_the_issue_with_decentralisation.html b/blog/untrusted_the_issue_with_decentralisation.xhtml
similarity index 91%
rename from blog/untrusted_the_issue_with_decentralisation.html
rename to blog/untrusted_the_issue_with_decentralisation.xhtml
index dfc33f3..a563fd6 100644
--- a/blog/untrusted_the_issue_with_decentralisation.html
+++ b/blog/untrusted_the_issue_with_decentralisation.xhtml
@@ -1,13 +1,13 @@
-
-
+
+
-
+
@@ -16,23 +16,23 @@
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
Blog - #2
Untrusted: The Issue with Decentralisation
Posted: 2022-06-30 (UTC+00:00)
Updated: 2023-11-11 (UTC+00:00)
-
+
Introduction
Examples
diff --git a/changelog.html b/changelog.html
deleted file mode 100644
index ef59ecf..0000000
--- a/changelog.html
+++ /dev/null
@@ -1,42 +0,0 @@
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- Inferencium - Changelog
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- Changelog
-
-
-
-
-
-
diff --git a/changelog.xhtml b/changelog.xhtml
new file mode 100644
index 0000000..afb550e
--- /dev/null
+++ b/changelog.xhtml
@@ -0,0 +1,42 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Inferencium - Changelog
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Changelog
+
+
+
+
+
+
diff --git a/changelog/constellation.html b/changelog/constellation.xhtml
similarity index 57%
rename from changelog/constellation.html
rename to changelog/constellation.xhtml
index 03caca4..b536cfb 100644
--- a/changelog/constellation.html
+++ b/changelog/constellation.xhtml
@@ -1,13 +1,13 @@
-
+
-
+
@@ -16,20 +16,20 @@
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
Changelog - Constellation
-
+
diff --git a/changelog/firmware-aa000-0.html b/changelog/firmware-aa000-0.xhtml
similarity index 87%
rename from changelog/firmware-aa000-0.html
rename to changelog/firmware-aa000-0.xhtml
index 25f4dda..d1ce343 100644
--- a/changelog/firmware-aa000-0.html
+++ b/changelog/firmware-aa000-0.xhtml
@@ -1,13 +1,13 @@
-
+
-
+
@@ -16,20 +16,20 @@
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
Changelog - Firmware - aa000-0
-
+
7.0.0.8
6.0.0.7
diff --git a/changelog/firmware-xa000-0.html b/changelog/firmware-xa000-0.xhtml
similarity index 81%
rename from changelog/firmware-xa000-0.html
rename to changelog/firmware-xa000-0.xhtml
index 9fc6896..6d74969 100644
--- a/changelog/firmware-xa000-0.html
+++ b/changelog/firmware-xa000-0.xhtml
@@ -1,13 +1,13 @@
-
+
-
+
@@ -16,20 +16,20 @@
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
Changelog - Firmware - xa000-0
-
+
4.0.0.4
3.0.0.3
diff --git a/changelog/firmware-xb000-0.html b/changelog/firmware-xb000-0.xhtml
similarity index 69%
rename from changelog/firmware-xb000-0.html
rename to changelog/firmware-xb000-0.xhtml
index 1f750a4..37930cf 100644
--- a/changelog/firmware-xb000-0.html
+++ b/changelog/firmware-xb000-0.xhtml
@@ -1,13 +1,13 @@
-
+
-
+
@@ -16,20 +16,20 @@
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
Changelog - Firmware - xb000-0
-
+
1.0.0.1
0.0.0.0
diff --git a/changelog/planetarium.html b/changelog/planetarium.xhtml
similarity index 57%
rename from changelog/planetarium.html
rename to changelog/planetarium.xhtml
index 93c0a6c..ff01e91 100644
--- a/changelog/planetarium.html
+++ b/changelog/planetarium.xhtml
@@ -1,13 +1,13 @@
-
+
-
+
@@ -16,20 +16,20 @@
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
Changelog - Planetarium
-
+
diff --git a/contact.html b/contact.xhtml
similarity index 70%
rename from contact.html
rename to contact.xhtml
index 31772af..bf191d9 100644
--- a/contact.html
+++ b/contact.xhtml
@@ -1,13 +1,13 @@
-
+
-
+
@@ -16,20 +16,20 @@
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
Contact
-
+
End-to-end encrypted contact methods
@@ -47,17 +47,15 @@
allow verification to mitigate man-in-the-middle attacks, have
high security, and reasonable privacy.
Use the
- keys
- for each contact method to verify my devices.
- Note: Verification does not verify a person, only their devices,
+ keys
+ for each contact method to verify my devices.
+ Note: Verification does not verify a person, only their devices,
and can be defeated via coercion or other force.
- Signal
-
- +447549902964
-
XMPP
-
+
Signal
+ +447549902964
+ XMPP
inference@inferencium.net (Main) -
- (Key )
+ (Key )
-
+
-
+
@@ -16,16 +16,16 @@
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
Directory
@@ -54,7 +54,7 @@
Topic: Any, excluding
NSFW.
Multimedia prohibited unless
- part of discussion.
+ part of discussion.
No
@@ -67,7 +67,7 @@
Inferencium moderation channel.
Topic: Moderation of all XMPP
channels hosted by Inferencium.
- Inferencium moderators only.
+
Inferencium moderators only.
No
@@ -81,7 +81,7 @@
Topic: Any, excluding
NSFW.
Discussion prohibited outside of
- multimedia discussion.
+ multimedia discussion.
No
diff --git a/documentation.html b/documentation.html
deleted file mode 100644
index 6545194..0000000
--- a/documentation.html
+++ /dev/null
@@ -1,42 +0,0 @@
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- Inferencium - Documentation
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- Documentation
-
-
-
-
-
-
diff --git a/documentation.xhtml b/documentation.xhtml
new file mode 100644
index 0000000..7e2c001
--- /dev/null
+++ b/documentation.xhtml
@@ -0,0 +1,42 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Inferencium - Documentation
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Documentation
+
+
+
+
+
+
diff --git a/documentation/hardened_malloc.html b/documentation/hardened_malloc.xhtml
similarity index 81%
rename from documentation/hardened_malloc.html
rename to documentation/hardened_malloc.xhtml
index ba49914..4661925 100644
--- a/documentation/hardened_malloc.html
+++ b/documentation/hardened_malloc.xhtml
@@ -1,13 +1,13 @@
-
+
-
+
@@ -16,16 +16,16 @@
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
-
+
Increase Permitted Amount of Memory Pages
Clone hardened_malloc Source Code
@@ -69,13 +69,13 @@
-
$ make <arguments>
+ $ make <arguments>
CONFIG_N_ARENA=n
can be adjusted to increase parallel
performance at the expense of memory usage, or decrease memory usage at the expense of
parallel performance, where n is an integer. Higher values prefer parallel
performance, lower values prefer lower memory usage. The number of arenas has no impact
- on the security properties of hardened_malloc.
- Minimum number of arenas: 1
+ on the security properties of hardened_malloc.
+ Minimum number of arenas: 1
Maximum number of arenas: 256
For extra security, CONFIG_SEAL_METADATA=true
can be used in order to
control whether Memory Protection Keys are used to disable access to all writable
@@ -98,8 +98,8 @@
musl-based systems: Add
export LD_PRELOAD="<hardened_malloc path> "
to
- /etc/environment
- glibc-based systems: Add <hardened_malloc path>
to
+ /etc/environment
+ glibc-based systems: Add <hardened_malloc path>
to
/etc/ld.so.preload
diff --git a/documentation/openssl_selfsigned_certificate_chain.html b/documentation/openssl_selfsigned_certificate_chain.xhtml
similarity index 88%
rename from documentation/openssl_selfsigned_certificate_chain.html
rename to documentation/openssl_selfsigned_certificate_chain.xhtml
index e2428c9..aa4ab33 100644
--- a/documentation/openssl_selfsigned_certificate_chain.html
+++ b/documentation/openssl_selfsigned_certificate_chain.xhtml
@@ -1,13 +1,13 @@
-
+
-
+
@@ -16,16 +16,16 @@
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
-
+
Create Certificate Authority Key
Verify Certificate Authority Key
@@ -75,7 +75,7 @@
- openssl req -new -sha256 -subj "/C=<country> /ST=<state/province> /L=<locality> /O=<organization> /CN=<common name>" -addext "subjectAltName = DNS.1:<alternative DNS entry> " -key <server key name> .pem -out <server certificate signing request name> .pem
+ openssl req -new -sha256 -subj "/C=<country> /ST=<state/province> /L=<locality> /O=<organization> /CN=<common name> " -addext "subjectAltName = DNS.1:<alternative DNS entry> " -key <server key name> .pem -out <server certificate signing request name> .pem
diff --git a/index.html b/index.html
deleted file mode 100644
index b8bacf4..0000000
--- a/index.html
+++ /dev/null
@@ -1,31 +0,0 @@
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- Inferencium
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
diff --git a/index.xhtml b/index.xhtml
new file mode 100644
index 0000000..cb2e47f
--- /dev/null
+++ b/index.xhtml
@@ -0,0 +1,31 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Inferencium
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/key.html b/key.xhtml
similarity index 82%
rename from key.html
rename to key.xhtml
index d517455..074f322 100644
--- a/key.html
+++ b/key.xhtml
@@ -1,13 +1,13 @@
-
+
-
+
@@ -16,20 +16,20 @@
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
Key
-
+
diff --git a/music.html b/music.xhtml
similarity index 74%
rename from music.html
rename to music.xhtml
index 0d5aff6..938f95d 100644
--- a/music.html
+++ b/music.xhtml
@@ -1,13 +1,13 @@
-
+
-
+
@@ -16,16 +16,16 @@
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
Music