diff --git a/README.md b/README.md index e10fc54..2ff02b8 100644 --- a/README.md +++ b/README.md @@ -3,11 +3,14 @@

Licensing

-

All content is licensed under BSD 3-Clause Clear License.

+

All content is licensed under BSD 3-Clause Clear license.


-

Exceptions: All content outside of code, including personal content
+

Exceptions:
+

    +
  1. All content outside of code, including personal content
    such as blog posts, is copyrighted and cannot be distributed or modified
    -without explicit consent from myself.

    +without explicit consent from myself.

    2. +


Security

@@ -19,40 +22,14 @@ The maintainers take no responsibility for any security issues which
may arise due to usage of this repository.



-

Policy

-

Contributing

-

To contribute to the project, submit a pull request. All pull requests
-are subject to approval.
-
-Code must follow the standard style for Inferencium Network code:
-- 80 character column limit.
-- Tab indents.
-- 1 tab indent equals 4 columns.
-- Comments must be used for each different block of code.
-- Comments must be concise. Do not make comments longer than necessary.
-- Code and comments must be professional. No funny or vulgar code or
-comments.
-
-Files must be stored in their related directories.
-
-Text files must be stored as plain text (.txt) or Markdown (.md) files.
-
-All dates and times must be ISO 8601 compliant (YYYY-MM-DD HH:MM).
-
-All filenames must be most significant to least significant, lowercase, and
-hyphens must be used instead of spaces.

-
-

Branches

dev

Development branch. All pre-alpha development and alpha testing happens
here.
-Merge requests must be made to the dev branch.


beta

-

Beta branch. All beta testing of the software happens here.

+

Beta branch. All beta testing happens here.


stable

-

Stable branch. Complete and stable versions of the software are stored
-here.
+

Stable branch. Complete and stable versions are stored here.

diff --git a/blog/systemd-insecurity.html b/blog/systemd-insecurity.html index 64660d0..cfafc80 100644 --- a/blog/systemd-insecurity.html +++ b/blog/systemd-insecurity.html @@ -19,23 +19,29 @@

systemd Insecurity


Posted: 2022-01-29 (UTC+00:00)

-

Updated: 2022-10-29 (UTC+00:00)

+

Updated: 2022-11-14 (UTC+00:00)



Anyone who cares about security may want to switch from systemd as soon as possible; its lead developer doesn't care about your security at all.


+
+

Issue #0 - Against CVE Assignment

+

Poettering:
"You don't assign CVEs to every single random bugfix we do, do you?"


My thoughts:
-Yes, if they're security related.

+Yes, if they're security-related.


Source:
-https://github.com/systemd/systemd/pull/5998

+systemd GitHub Issue 5998




+

Issue #1 - CVEs Are Not Useful

+

Poettering:
"Humpf, I am not convinced this is the right way to announce this. We never did that, and half the CVEs aren't useful anyway, hence I am not @@ -49,19 +55,25 @@ found and their severity, so yes, it *is* the correct way to announce it. It seems as if over 95 security-concious people think the same.


Source:
-https://github.com/systemd/systemd/pull/6225

+systemd GitHub Issue 6225




+

Issue #2 - Security is a Circus

+

Poettering:
"I am not sure I buy enough into the security circus to do that though for any minor issue..."


Source:
-https://github.com/systemd/systemd/issues/5144

+systemd GitHub Issue 5144




+

Issue #3 - Blaming the User

+

Poettering:
"Yes, as you found out "0day" is not a valid username. I wonder which tool permitted you to create it in the first place. Note that not permitting @@ -73,7 +85,7 @@ to generate invalid configuration. Hence, yes, it's a feature that we don't permit invalid user names, and I'd consider it a limitation of xinetd that it doesn't refuse an invalid username.

-So, yeah, I don't think there's anything to fix in systemd here. I< +So, yeah, I don't think there's anything to fix in systemd here. I understand this is annoying, but still: the username is clearly not valid."


My thoughts:
@@ -81,7 +93,8 @@ systemd was the thing that allowed root access just because a username started with a number, then Poettering blamed the user.


Source:
-https://github.com/systemd/systemd/issues/6237

+systemd GitHub Issue 6237



diff --git a/contact.html b/contact.html index 73fc60a..048e4bd 100644 --- a/contact.html +++ b/contact.html @@ -21,10 +21,10 @@

Preferred

Whenever possible, use the following contact methods; they allow verification to mitigate man-in-the-middle attacks, - have solid security, and reasonable privacy.
+ have high security, and reasonable privacy.

-

Use the keys for each contact method to verify my devices. - Note that verification does not verify a person, only their devices, +

Use the keys for each contact method to verify my devices.
+ Note: Verification does not verify a person, only their devices, and can be defeated via coercion or other force.


Signal

diff --git a/contact/signal.html b/contact/signal.html index 606d45e..a62a765 100644 --- a/contact/signal.html +++ b/contact/signal.html @@ -18,7 +18,8 @@

Signal


-

Updated: 2022-06-23 (UTC+00:00)

+

Updated: 2022-11-14 (UTC+00:00)

+

+447549902964 diff --git a/contact/threema.html b/contact/threema.html index d8d31cf..398c3b3 100644 --- a/contact/threema.html +++ b/contact/threema.html @@ -2,27 +2,28 @@ Inferencium Network - Contact - Threema - +
Inferencium Network


-
About
-
Contact
-
Blog
-
Source
+
About
+
Contact
+
Blog
+
Source

Contact


Threema


-

Updated: 2022-01-28 (UTC+00:00)

+

Updated: 2022-11-14 (UTC+00:00)

+

MD649ERN

Key

- +

diff --git a/contact/xmpp.html b/contact/xmpp.html index 2780bd9..2cb49cd 100644 --- a/contact/xmpp.html +++ b/contact/xmpp.html @@ -2,55 +2,55 @@ Inferencium Network - Contact - XMPP - +
Inferencium Network


-
About
-
Contact
-
Blog
-
Source
+
About
+
Contact
+
Blog
+
Source

Contact


XMPP


-

Updated: 2022-10-13 (UTC+00:00)

+

Updated: 2022-11-14 (UTC+00:00)


Whenever possible, open the links to pin the fingerprint directly from this webpage. If that is not possible, manually verify the fingerprints.


+

inference@inferencium.net

Key

Smartphone
- 
-				
-						1bd03c6a 5e011655 2fafd697 da4fce70 63de5a83 a264a34a fcce78fe 6b06820c
-				
-
- xmpp:inference@inferencium.net?omemo-sid-1586888206=1bd03c6a5e0116552fafd697da4fce7063de5a83a264a34afcce78fe6b06820c + + 1bd03c6a 5e011655 2fafd697 da4fce70 63de5a83 a264a34a fcce78fe 6b06820c + +
+ xmpp:inference@inferencium.net?omemo-sid-1586888206=1bd03c6a5e0116552fafd697da4fce7063de5a83a264a34afcce78fe6b06820c

Desktop
- 
-				
-						87ffbf5a 40f271c7 4615d84c 5816ef07 b7e7a90a 5406edb1 b2b8378f 0439551d
-				
-
+ + 87ffbf5a 40f271c7 4615d84c 5816ef07 b7e7a90a 5406edb1 b2b8378f 0439551d + +


inference@plus.st

Key

Smartphone
- 
-				
-						9f9b50e4 3bb5ae5d 886213ad 43015719 7c40aa99 e436445d e0e360a9 24076015
-				
-
- xmpp:inference@plus.st?omemo-sid-1890454018=9f9b50e43bb5ae5d886213ad430157197c40aa99e436445de0e360a924076015 + + 9f9b50e4 3bb5ae5d 886213ad 43015719 7c40aa99 e436445d e0e360a9 24076015 + +
+ xmpp:inference@plus.st?omemo-sid-1890454018=9f9b50e43bb5ae5d886213ad430157197c40aa99e436445de0e360a924076015