From 83714d56d7ae354d15dc79a7f72b8f985deee1a4 Mon Sep 17 00:00:00 2001 From: inference Date: Sun, 13 Nov 2022 15:58:10 +0000 Subject: [PATCH 01/13] Add licensing exceptions to ordered list. Remove unnecessary Policy section. Improve Branches wording. --- README.md | 37 +++++++------------------------------ 1 file changed, 7 insertions(+), 30 deletions(-) diff --git a/README.md b/README.md index e10fc54..2d0dd68 100644 --- a/README.md +++ b/README.md @@ -5,9 +5,12 @@

Licensing

All content is licensed under BSD 3-Clause Clear License.


-

Exceptions: All content outside of code, including personal content
+

Exceptions:
+

    +
  1. All content outside of code, including personal content
    such as blog posts, is copyrighted and cannot be distributed or modified
    -without explicit consent from myself.

    +without explicit consent from myself.

    2. +


Security

@@ -19,40 +22,14 @@ The maintainers take no responsibility for any security issues which
may arise due to usage of this repository.



-

Policy

-

Contributing

-

To contribute to the project, submit a pull request. All pull requests
-are subject to approval.
-
-Code must follow the standard style for Inferencium Network code:
-- 80 character column limit.
-- Tab indents.
-- 1 tab indent equals 4 columns.
-- Comments must be used for each different block of code.
-- Comments must be concise. Do not make comments longer than necessary.
-- Code and comments must be professional. No funny or vulgar code or
-comments.
-
-Files must be stored in their related directories.
-
-Text files must be stored as plain text (.txt) or Markdown (.md) files.
-
-All dates and times must be ISO 8601 compliant (YYYY-MM-DD HH:MM).
-
-All filenames must be most significant to least significant, lowercase, and
-hyphens must be used instead of spaces.

-
-

Branches

dev

Development branch. All pre-alpha development and alpha testing happens
here.
-Merge requests must be made to the dev branch.


beta

-

Beta branch. All beta testing of the software happens here.

+

Beta branch. All beta testing happens here.


stable

-

Stable branch. Complete and stable versions of the software are stored
-here.
+

Stable branch. Complete and stable versions are stored here.

From 98741fdb0a7645a02513a1d7b091345638dc66b6 Mon Sep 17 00:00:00 2001 From: inference Date: Sun, 13 Nov 2022 15:58:57 +0000 Subject: [PATCH 02/13] Remove unnecessary line break. --- LICENSE.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/LICENSE.md b/LICENSE.md index 6d6a0f5..8e7d225 100644 --- a/LICENSE.md +++ b/LICENSE.md @@ -1,6 +1,6 @@ The Clear BSD License -Copyright (c) 2022 Inference
+Copyright (c) 2022 Inference All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted (subject to the limitations in the disclaimer below) provided that the following conditions are met: From 2f5a256f3c189e5fcd6a1986a60d7db311308631 Mon Sep 17 00:00:00 2001 From: inference Date: Sun, 13 Nov 2022 15:59:53 +0000 Subject: [PATCH 03/13] Improve licensing wording. --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 2d0dd68..2ff02b8 100644 --- a/README.md +++ b/README.md @@ -3,7 +3,7 @@

Licensing

-

All content is licensed under BSD 3-Clause Clear License.

+

All content is licensed under BSD 3-Clause Clear license.


Exceptions:

    From 845e6ebab48ae3a62a689daf210cc8cb338f90b6 Mon Sep 17 00:00:00 2001 From: inference Date: Sun, 13 Nov 2022 16:13:17 +0000 Subject: [PATCH 04/13] Readd line break. --- LICENSE.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/LICENSE.md b/LICENSE.md index 8e7d225..6d6a0f5 100644 --- a/LICENSE.md +++ b/LICENSE.md @@ -1,6 +1,6 @@ The Clear BSD License -Copyright (c) 2022 Inference +Copyright (c) 2022 Inference
    All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted (subject to the limitations in the disclaimer below) provided that the following conditions are met: From 64452b860ebd7142bc2b97c81645a388e74ffe02 Mon Sep 17 00:00:00 2001 From: inference Date: Mon, 14 Nov 2022 11:34:07 +0000 Subject: [PATCH 05/13] Add headings for each issue. Change source link targets to Git issue comments rather than only the Git issues. --- blog/systemd-insecurity.html | 27 ++++++++++++++++++++------- 1 file changed, 20 insertions(+), 7 deletions(-) diff --git a/blog/systemd-insecurity.html b/blog/systemd-insecurity.html index 64660d0..cfafc80 100644 --- a/blog/systemd-insecurity.html +++ b/blog/systemd-insecurity.html @@ -19,23 +19,29 @@

    systemd Insecurity


    Posted: 2022-01-29 (UTC+00:00)

    -

    Updated: 2022-10-29 (UTC+00:00)

    +

    Updated: 2022-11-14 (UTC+00:00)



    Anyone who cares about security may want to switch from systemd as soon as possible; its lead developer doesn't care about your security at all.


    +
    +

    Issue #0 - Against CVE Assignment

    +

    Poettering:
    "You don't assign CVEs to every single random bugfix we do, do you?"


    My thoughts:
    -Yes, if they're security related.

    +Yes, if they're security-related.


    Source:
    -https://github.com/systemd/systemd/pull/5998

    +systemd GitHub Issue 5998




    +

    Issue #1 - CVEs Are Not Useful

    +

    Poettering:
    "Humpf, I am not convinced this is the right way to announce this. We never did that, and half the CVEs aren't useful anyway, hence I am not @@ -49,19 +55,25 @@ found and their severity, so yes, it *is* the correct way to announce it. It seems as if over 95 security-concious people think the same.


    Source:
    -https://github.com/systemd/systemd/pull/6225

    +systemd GitHub Issue 6225




    +

    Issue #2 - Security is a Circus

    +

    Poettering:
    "I am not sure I buy enough into the security circus to do that though for any minor issue..."


    Source:
    -https://github.com/systemd/systemd/issues/5144

    +systemd GitHub Issue 5144




    +

    Issue #3 - Blaming the User

    +

    Poettering:
    "Yes, as you found out "0day" is not a valid username. I wonder which tool permitted you to create it in the first place. Note that not permitting @@ -73,7 +85,7 @@ to generate invalid configuration. Hence, yes, it's a feature that we don't permit invalid user names, and I'd consider it a limitation of xinetd that it doesn't refuse an invalid username.

    -So, yeah, I don't think there's anything to fix in systemd here. I< +So, yeah, I don't think there's anything to fix in systemd here. I understand this is annoying, but still: the username is clearly not valid."


    My thoughts:
    @@ -81,7 +93,8 @@ systemd was the thing that allowed root access just because a username started with a number, then Poettering blamed the user.


    Source:
    -https://github.com/systemd/systemd/issues/6237

    +systemd GitHub Issue 6237



    From 9f6d8601196c0e0c7cc7df0a35bdbc5e6c06dbd7 Mon Sep 17 00:00:00 2001 From: inference Date: Mon, 14 Nov 2022 11:42:32 +0000 Subject: [PATCH 06/13] Remove preformatted HTML. Improve HTML link formatting. Improve HTML spacing. --- contact/xmpp.html | 44 ++++++++++++++++++++++---------------------- 1 file changed, 22 insertions(+), 22 deletions(-) diff --git a/contact/xmpp.html b/contact/xmpp.html index 2780bd9..1a54b8d 100644 --- a/contact/xmpp.html +++ b/contact/xmpp.html @@ -2,16 +2,16 @@ Inferencium Network - Contact - XMPP - +
    Inferencium Network


    - - - - + + + +

    Contact

    @@ -23,34 +23,34 @@

    Whenever possible, open the links to pin the fingerprint directly from this webpage. If that is not possible, manually verify the fingerprints.


    +

    inference@inferencium.net

    Key

    Smartphone
    - 
    -				
-						1bd03c6a 5e011655 2fafd697 da4fce70 63de5a83 a264a34a fcce78fe 6b06820c
-				
-
    - xmpp:inference@inferencium.net?omemo-sid-1586888206=1bd03c6a5e0116552fafd697da4fce7063de5a83a264a34afcce78fe6b06820c + + 1bd03c6a 5e011655 2fafd697 da4fce70 63de5a83 a264a34a fcce78fe 6b06820c + +
    + xmpp:inference@inferencium.net?omemo-sid-1586888206=1bd03c6a5e0116552fafd697da4fce7063de5a83a264a34afcce78fe6b06820c

    Desktop
    - 
    -				
-						87ffbf5a 40f271c7 4615d84c 5816ef07 b7e7a90a 5406edb1 b2b8378f 0439551d
-				
-
    + + 87ffbf5a 40f271c7 4615d84c 5816ef07 b7e7a90a 5406edb1 b2b8378f 0439551d + +


    inference@plus.st

    Key

    Smartphone
    - 
    -				
-						9f9b50e4 3bb5ae5d 886213ad 43015719 7c40aa99 e436445d e0e360a9 24076015
-				
-
    - xmpp:inference@plus.st?omemo-sid-1890454018=9f9b50e43bb5ae5d886213ad430157197c40aa99e436445de0e360a924076015 + + 9f9b50e4 3bb5ae5d 886213ad 43015719 7c40aa99 e436445d e0e360a9 24076015 + +
    + xmpp:inference@plus.st?omemo-sid-1890454018=9f9b50e43bb5ae5d886213ad430157197c40aa99e436445de0e360a924076015


    From 2b7f22386a8676efeb65e812035e199c0000af50 Mon Sep 17 00:00:00 2001 From: inference Date: Mon, 14 Nov 2022 11:43:57 +0000 Subject: [PATCH 07/13] Improve HTML spacing. --- contact/signal.html | 1 + 1 file changed, 1 insertion(+) diff --git a/contact/signal.html b/contact/signal.html index 606d45e..078d544 100644 --- a/contact/signal.html +++ b/contact/signal.html @@ -20,6 +20,7 @@

    Updated: 2022-06-23 (UTC+00:00)


    +
    +447549902964 From a7490681f6a3f0a3ca2f0e5976c3a3d4c36e4b8b Mon Sep 17 00:00:00 2001 From: inference Date: Mon, 14 Nov 2022 11:44:55 +0000 Subject: [PATCH 08/13] Improve wording. --- contact.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/contact.html b/contact.html index 73fc60a..d46796f 100644 --- a/contact.html +++ b/contact.html @@ -21,7 +21,7 @@

    Preferred

    Whenever possible, use the following contact methods; they allow verification to mitigate man-in-the-middle attacks, - have solid security, and reasonable privacy.
    + have high security, and reasonable privacy.

    Use the keys for each contact method to verify my devices. Note that verification does not verify a person, only their devices, From 95f1acd69aaec1289c1c3d1438f713cf9fc21685 Mon Sep 17 00:00:00 2001 From: inference Date: Mon, 14 Nov 2022 11:46:43 +0000 Subject: [PATCH 09/13] Improve structure. --- contact.html | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/contact.html b/contact.html index d46796f..048e4bd 100644 --- a/contact.html +++ b/contact.html @@ -23,8 +23,8 @@ they allow verification to mitigate man-in-the-middle attacks, have high security, and reasonable privacy.

    -

    Use the keys for each contact method to verify my devices. - Note that verification does not verify a person, only their devices, +

    Use the keys for each contact method to verify my devices.
    + Note: Verification does not verify a person, only their devices, and can be defeated via coercion or other force.


    Signal

    From 7b683c5a05a9538786a0dbd53960edd38aa419c2 Mon Sep 17 00:00:00 2001 From: inference Date: Mon, 14 Nov 2022 11:50:46 +0000 Subject: [PATCH 10/13] Switch sidebar and CSS links from absolute links to relative links to improve maintainability. Improve HTML spacing. Decrease key image size. --- contact/threema.html | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/contact/threema.html b/contact/threema.html index d8d31cf..9521b31 100644 --- a/contact/threema.html +++ b/contact/threema.html @@ -2,16 +2,16 @@ Inferencium Network - Contact - Threema - +

    Inferencium Network


    - - - - + + + +

    Contact

    @@ -20,9 +20,10 @@

    Updated: 2022-01-28 (UTC+00:00)


    +

    MD649ERN

    Key

    - +

    From 8bb1a90714c7f14433e98ca003951a4b9e05e183 Mon Sep 17 00:00:00 2001 From: inference Date: Mon, 14 Nov 2022 11:51:28 +0000 Subject: [PATCH 11/13] Update updated date. --- contact/threema.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/contact/threema.html b/contact/threema.html index 9521b31..398c3b3 100644 --- a/contact/threema.html +++ b/contact/threema.html @@ -18,7 +18,7 @@

    Threema


    -

    Updated: 2022-01-28 (UTC+00:00)

    +

    Updated: 2022-11-14 (UTC+00:00)



    MD649ERN

    From de8d916cb62ca9bb3b5d822139c90ee9dea8748c Mon Sep 17 00:00:00 2001 From: inference Date: Mon, 14 Nov 2022 11:52:30 +0000 Subject: [PATCH 12/13] Update updated date. --- contact/signal.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/contact/signal.html b/contact/signal.html index 078d544..a62a765 100644 --- a/contact/signal.html +++ b/contact/signal.html @@ -18,7 +18,7 @@

    Signal


    -

    Updated: 2022-06-23 (UTC+00:00)

    +

    Updated: 2022-11-14 (UTC+00:00)



    From c32bf7023df3069769ab9ce7ed3d77cba1be7fc7 Mon Sep 17 00:00:00 2001 From: inference Date: Mon, 14 Nov 2022 11:52:48 +0000 Subject: [PATCH 13/13] Update updated date. --- contact/xmpp.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/contact/xmpp.html b/contact/xmpp.html index 1a54b8d..2cb49cd 100644 --- a/contact/xmpp.html +++ b/contact/xmpp.html @@ -18,7 +18,7 @@

    XMPP


    -

    Updated: 2022-10-13 (UTC+00:00)

    +

    Updated: 2022-11-14 (UTC+00:00)


    Whenever possible, open the links to pin the fingerprint directly from this webpage. If that is not possible, manually verify the fingerprints.