Fix HTML link formatting.
This commit is contained in:
parent
656c107518
commit
9a16a8f0bf
SSH Key Fingerprint:
SHA256:9Pl0nZ2UJacgm+IeEtLSZ4FOESgP1eKCtRflfPfdX9M
475
about.html
475
about.html
@ -5,7 +5,7 @@
|
|||||||
<!-- Copyright 2022 Jake Winters -->
|
<!-- Copyright 2022 Jake Winters -->
|
||||||
<!-- SPDX-License-Identifier: BSD-3-Clause -->
|
<!-- SPDX-License-Identifier: BSD-3-Clause -->
|
||||||
|
|
||||||
<!-- Version: 5.0.2.94 -->
|
<!-- Version: 5.0.2.95 -->
|
||||||
|
|
||||||
|
|
||||||
<html>
|
<html>
|
||||||
@ -31,90 +31,52 @@
|
|||||||
<body>
|
<body>
|
||||||
<h1>About</h1>
|
<h1>About</h1>
|
||||||
<!-- Table of contents -->
|
<!-- Table of contents -->
|
||||||
<h2 id="toc"><a href="#toc" class="h2"
|
<h2 id="toc"><a href="#toc" class="h2">Table of Contents<a/></h2>
|
||||||
>Table of Contents<a/></h2>
|
|
||||||
<ul>
|
<ul>
|
||||||
<li><a href="#about_me" class="body-link"
|
<li><a href="#about_me" class="body-link">About Me</a></li>
|
||||||
>About Me</a></li>
|
<li><a href="#licensing" class="body-link">Licensing</a></li>
|
||||||
<li><a href="#licensing" class="body-link"
|
|
||||||
>Licensing</a></li>
|
|
||||||
<ul>
|
<ul>
|
||||||
<li><a href="#licensing-preferred" class="body-link"
|
<li><a href="#licensing-preferred" class="body-link">Preferred</a></li>
|
||||||
>Preferred</a></li>
|
|
||||||
<ul>
|
<ul>
|
||||||
<li><a href="#licensing-preferred-code"
|
<li><a href="#licensing-preferred-code" class="body-link">Code<a/></li>
|
||||||
class="body-link"
|
|
||||||
>Code<a/></li>
|
|
||||||
<ul>
|
<ul>
|
||||||
<li><a href="#licensing-bsd-3-
|
<li><a href="#licensing-bsd-3-clause-clear" class="body-link">BSD 3-Clause Clear License</a></li>
|
||||||
clause-clear"
|
<li><a href="#licensing-mit" class="body-link">MIT License</a></li>
|
||||||
class="body-link"
|
<li><a href="#licensing-gpl-2.0" class="body-link">GNU General Public License v2.0</a></li>
|
||||||
>BSD 3-Clause Clear License</a></li>
|
|
||||||
<li><a href="#licensing-mit"
|
|
||||||
class="body-link"
|
|
||||||
>MIT License</a></li>
|
|
||||||
<li><a href="#licensing-gpl-2.0"
|
|
||||||
class="body-link"
|
|
||||||
>GNU General Public License
|
|
||||||
v2.0</a></li>
|
|
||||||
</ul>
|
</ul>
|
||||||
<li><a href="#licensing-preferred-non-code"
|
<li><a href="#licensing-preferred-non-code" class="body-link">Non-code</a></li>
|
||||||
class="body-link"
|
|
||||||
>Non-code</a></li>
|
|
||||||
<ul>
|
<ul>
|
||||||
<li><a href="#licensing-cc-by-
|
<li><a href="#licensing-cc-by-4.0" class="body-link">Creative Commons Attribution 4.0 International</a></li>
|
||||||
4.0" class="body-link"
|
|
||||||
>Creative Commons Attribution
|
|
||||||
4.0 International</a></li>
|
|
||||||
</ul>
|
</ul>
|
||||||
</ul>
|
</ul>
|
||||||
<li><a href="#licensing-other" class="body-link"
|
<li><a href="#licensing-other" class="body-link">Other</a></li>
|
||||||
>Other</a></li>
|
|
||||||
<ul>
|
<ul>
|
||||||
<li><a href="#licensing-other-code"
|
<li><a href="#licensing-other-code" class="body-link">Code</a></li>
|
||||||
class="body-link"
|
|
||||||
>Code</a></li>
|
|
||||||
<ul>
|
<ul>
|
||||||
<li><a href="#licensing-gpl-3.0"
|
<li><a href="#licensing-gpl-3.0" class="body-link">GNU General Public License v3.0</a></li>
|
||||||
class="body-link"
|
|
||||||
>GNU General Public License v3.0</a></li>
|
|
||||||
</ul>
|
</ul>
|
||||||
<li><a href="#licensing-other-non-code"
|
<li><a href="#licensing-other-non-code" class="body-link">Non-code</a></li>
|
||||||
class="body-link"
|
|
||||||
>Non-code</a></li>
|
|
||||||
<ul>
|
<ul>
|
||||||
<li><a href="#licensing-cc-by-
|
<li><a href="#licensing-cc-by-nc-4.0" class="body-link">Creative Commons Attribution Non Commercial 4.0 International</a></li>
|
||||||
nc-4.0" class="body-link"
|
|
||||||
>Creative Commons Attribution
|
|
||||||
Non Commercial 4.0
|
|
||||||
International</a></li>
|
|
||||||
</ul>
|
</ul>
|
||||||
</ul>
|
</ul>
|
||||||
</ul>
|
</ul>
|
||||||
<li><a href="#recommendations" class="body-link"
|
<li><a href="#recommendations" class="body-link">Recommendations</a></li>
|
||||||
>Recommendations</a></li>
|
|
||||||
<ul>
|
<ul>
|
||||||
<li><a href="#hardware" class="body-link"
|
<li><a href="#hardware" class="body-link">Hardware</a></li>
|
||||||
>Hardware</a></li>
|
|
||||||
<ul>
|
<ul>
|
||||||
<li><a href="#hdw-smartphone" class="body-link"
|
<li><a href="#hdw-smartphone" class="body-link">Smartphone</a></li>
|
||||||
>Smartphone</a></li>
|
|
||||||
</ul>
|
</ul>
|
||||||
<li><a href="#software" class="body-link"
|
<li><a href="#software" class="body-link">Software</a></li>
|
||||||
>Software</a></li>
|
|
||||||
<ul>
|
<ul>
|
||||||
<li><a href="#sfw-desktop" class="body-link"
|
<li><a href="#sfw-desktop" class="body-link">Desktop</a></li>
|
||||||
>Desktop</a></li>
|
<li><a href="#sfw-smartphone" class="body-link">Smartphone</a></li>
|
||||||
<li><a href="#sfw-smartphone" class="body-link"
|
|
||||||
>Smartphone</a></li>
|
|
||||||
</ul>
|
</ul>
|
||||||
<li><a href="#music" class="body-link"
|
<li><a href="#music" class="body-link">Music</a></li>
|
||||||
>Music</a></li>
|
|
||||||
</ul>
|
</ul>
|
||||||
</ul>
|
</ul>
|
||||||
<!-- About me -->
|
<!-- About me -->
|
||||||
<h2 id="about_me"><a href="#about_me" class="h2"
|
<h2 id="about_me"><a href="#about_me" class="h2">About Me</a></h2>
|
||||||
>About Me</a></h2>
|
|
||||||
<p>I am Jake Winters, also known by my pseudonym "Inference", a cybersecurity researcher
|
<p>I am Jake Winters, also known by my pseudonym "Inference", a cybersecurity researcher
|
||||||
based in United Kingdom.<br>
|
based in United Kingdom.<br>
|
||||||
I am the founder, lead developer, and administrator, of Inferencium.<br>
|
I am the founder, lead developer, and administrator, of Inferencium.<br>
|
||||||
@ -132,14 +94,12 @@
|
|||||||
I am also a modular design advocate for the ability to securely and robustly make
|
I am also a modular design advocate for the ability to securely and robustly make
|
||||||
changes to hardware and software without the entire system being affected.</p>
|
changes to hardware and software without the entire system being affected.</p>
|
||||||
<p>If you want to contact me for any reason, you can use my
|
<p>If you want to contact me for any reason, you can use my
|
||||||
<a href="https://inferencium.net/contact.html" class="body-link"
|
<a href="https://inferencium.net/contact.html" class="body-link">contact methods</a>.</p>
|
||||||
>contact methods</a>.</p>
|
|
||||||
<p>I run the public Systems Hardening XMPP channel dedicated to systems security and
|
<p>I run the public Systems Hardening XMPP channel dedicated to systems security and
|
||||||
privacy hardening at <code>sys-hardening@muc.xmpp.inferencium.net</code>, and its
|
privacy hardening at <code>sys-hardening@muc.xmpp.inferencium.net</code>, and its
|
||||||
respective off-topic channel at
|
respective off-topic channel at
|
||||||
<code>sys-hardening-ot@muc.xmpp.inferencium.net</code>.</p>
|
<code>sys-hardening-ot@muc.xmpp.inferencium.net</code>.</p>
|
||||||
<h2 id="licensing"><a href="#licensing" class="h2"
|
<h2 id="licensing"><a href="#licensing" class="h2">Licensing</a></h2>
|
||||||
>Licensing</a></h2>
|
|
||||||
<p>Inferencium cares about upstreaming and sharing code, strongly preferring licenses which
|
<p>Inferencium cares about upstreaming and sharing code, strongly preferring licenses which
|
||||||
have high license compatibility in order to permit sharing code with as many other projects
|
have high license compatibility in order to permit sharing code with as many other projects
|
||||||
as possible; for this reason, permissive licenses are our preferred choice, while avoiding
|
as possible; for this reason, permissive licenses are our preferred choice, while avoiding
|
||||||
@ -150,25 +110,19 @@
|
|||||||
infeasible to do so. Our goal is to share code which has the least amount of restrictions as
|
infeasible to do so. Our goal is to share code which has the least amount of restrictions as
|
||||||
possible, to allow wider propagation of our code and allow more use cases and possibilities,
|
possible, to allow wider propagation of our code and allow more use cases and possibilities,
|
||||||
as well as ensuring proprietary code, whenever required, is permitted to be included.</p>
|
as well as ensuring proprietary code, whenever required, is permitted to be included.</p>
|
||||||
<p><a href="https://iso.org/standard/81870.html" class="body-link"
|
<p><a href="https://iso.org/standard/81870.html" class="body-link">ISO 5962:2021</a>
|
||||||
>ISO 5962:2021</a> is used for licensing, in the format
|
is used for licensing, in the format
|
||||||
<code>SPDX-License-Identifier: <license></code>; see the
|
<code>SPDX-License-Identifier: <license></code>; see the
|
||||||
<a href="https://spdx.org/licenses/" class="body-link"
|
<a href="https://spdx.org/licenses/" class="body-link">SPDX license list</a>
|
||||||
>SPDX license list</a> for the full list of available licenses under this standard.</p>
|
for the full list of available licenses under this standard.</p>
|
||||||
<h3 id="licensing-preferred"><a href="#licensing-preferred" class="h3"
|
<h3 id="licensing-preferred"><a href="#licensing-preferred" class="h3">Preferred</a></h3>
|
||||||
>Preferred</a></h3>
|
<h4 id="licensing-preferred-code"><a href="#licensing-preferred-code" class="h4">Code</a></h4>
|
||||||
<h4 id="licensing-preferred-code"><a href="#licensing-preferred-code"
|
<h5 id="licensing-bsd-3-clause-clear"><a href="#licensing-bsd-3-clause-clear" class="h5">BSD 3-Clause Clear License</a></h5>
|
||||||
class="h4"
|
|
||||||
>Code</a></h4>
|
|
||||||
<h5 id="licensing-bsd-3-clause-clear">
|
|
||||||
<a href="#licensing-bsd-3-clause-clear" class="h5"
|
|
||||||
>BSD 3-Clause Clear License</a></h5>
|
|
||||||
<code>SPDX-License-Identifier: BSD-3-Clause-Clear</code>
|
<code>SPDX-License-Identifier: BSD-3-Clause-Clear</code>
|
||||||
<p>Type: Permissive</p>
|
<p>Type: Permissive</p>
|
||||||
<br>
|
<br>
|
||||||
<p><a href="https://spdx.org/licenses/BSD-3-Clause-
|
<p><a href="https://spdx.org/licenses/BSD-3-Clause-Clear.html" class="body-link">BSD 3-Clause Clear License</a>
|
||||||
Clear.html" class="body-link"
|
is a highly permissive
|
||||||
>BSD 3-Clause Clear License</a> is a highly permissive
|
|
||||||
license which allows content licensed under it to be
|
license which allows content licensed under it to be
|
||||||
used in any way, whether in source or binary form, and
|
used in any way, whether in source or binary form, and
|
||||||
allows sublicensing under a different license, with the
|
allows sublicensing under a different license, with the
|
||||||
@ -178,9 +132,8 @@
|
|||||||
and/or its contributors may not be used to endorse or
|
and/or its contributors may not be used to endorse or
|
||||||
promote products derived from the original project.<br>
|
promote products derived from the original project.<br>
|
||||||
BSD 3-Clause Clear License is a derivative of
|
BSD 3-Clause Clear License is a derivative of
|
||||||
<a href="https://spdx.org/licenses/
|
<a href="https://spdx.org/licenses/BSD-3-Clause.html" class="body-link">BSD 3-Clause "New" or "Revised" License</a>,
|
||||||
BSD-3-Clause.html" class="body-link"
|
which adds
|
||||||
>BSD 3-Clause "New" or "Revised" License</a>, which adds
|
|
||||||
an explicit statement clarifying that patent rights are
|
an explicit statement clarifying that patent rights are
|
||||||
not granted by the license alone, and must be granted
|
not granted by the license alone, and must be granted
|
||||||
separately by the copyright and/or patent holder(s). We
|
separately by the copyright and/or patent holder(s). We
|
||||||
@ -190,14 +143,12 @@
|
|||||||
in regards to patents applied to code using the BSD
|
in regards to patents applied to code using the BSD
|
||||||
3-Clause "New" or "Revised" License.</p>
|
3-Clause "New" or "Revised" License.</p>
|
||||||
<br>
|
<br>
|
||||||
<h5 id="licensing-mit"><a href="#licensing-mit" class="h5"
|
<h5 id="licensing-mit"><a href="#licensing-mit" class="h5">MIT License</a></h5>
|
||||||
>MIT License</a></h5>
|
|
||||||
<code>SPDX-License-Identifier: MIT</code>
|
<code>SPDX-License-Identifier: MIT</code>
|
||||||
<p>Type: Permissive</p>
|
<p>Type: Permissive</p>
|
||||||
<br>
|
<br>
|
||||||
<p><a href="https://spdx.org/licenses/MIT.html"
|
<p><a href="https://spdx.org/licenses/MIT.html" class="body-link">MIT License</a>
|
||||||
class="body-link"
|
is a highly permissive license which
|
||||||
>MIT License</a> is a highly permissive license which
|
|
||||||
allows content licensed under it to be used in any way,
|
allows content licensed under it to be used in any way,
|
||||||
whether in source or binary form, and allows
|
whether in source or binary form, and allows
|
||||||
sublicensing under a different license, with the only
|
sublicensing under a different license, with the only
|
||||||
@ -209,20 +160,18 @@
|
|||||||
products derived from the original project, unless an
|
products derived from the original project, unless an
|
||||||
explicit statement is made alongside this license,
|
explicit statement is made alongside this license,
|
||||||
increasing complexity and deviating from the standard
|
increasing complexity and deviating from the standard
|
||||||
license text, we prefer <a href="#licensing-bsd-3-
|
license text, we prefer
|
||||||
clause-clear" class="body-link"
|
<a href="#licensing-bsd-3-clause-clear" class="body-link">BSD 3-Clause Clear License</a>;
|
||||||
>BSD 3-Clause Clear License</a>; however, MIT License is
|
however, MIT License is
|
||||||
a great choice when derivatives using the name of the
|
a great choice when derivatives using the name of the
|
||||||
original project and/or its contributors is a non-issue.</p>
|
original project and/or its contributors is a non-issue.</p>
|
||||||
<br>
|
<br>
|
||||||
<h5 id="licensing-gpl-2.0"><a href="#licensing-gpl-2.0" class="h5"
|
<h5 id="licensing-gpl-2.0"><a href="#licensing-gpl-2.0" class="h5">GNU General Public License v2.0</a></h5>
|
||||||
>GNU General Public License v2.0</a></h5>
|
|
||||||
<code>SPDX-License-Identifier: GPL-2.0-only</code>
|
<code>SPDX-License-Identifier: GPL-2.0-only</code>
|
||||||
<p>Type: Copyleft</p>
|
<p>Type: Copyleft</p>
|
||||||
<br>
|
<br>
|
||||||
<p><a href="https://spdx.org/licenses/GPL-2.0-
|
<p><a href="https://spdx.org/licenses/GPL-2.0-only.html" class="body-link">GNU General Public License v2.0</a>
|
||||||
only.html" class="body-link"
|
is a strong
|
||||||
>GNU General Public License v2.0</a> is a strong
|
|
||||||
copyleft license which restricts use of content licensed
|
copyleft license which restricts use of content licensed
|
||||||
under it by requiring all source code of the content to
|
under it by requiring all source code of the content to
|
||||||
be publicly available, making binary-only form and
|
be publicly available, making binary-only form and
|
||||||
@ -237,43 +186,33 @@
|
|||||||
license, it is avoided unless such restrictions would be
|
license, it is avoided unless such restrictions would be
|
||||||
beneficial to Inferencium code; whenever this is the
|
beneficial to Inferencium code; whenever this is the
|
||||||
case, the GNU General Public License v2.0 will be used,
|
case, the GNU General Public License v2.0 will be used,
|
||||||
rather than the more restrictive <a href="#licensing-gpl
|
rather than the more restrictive
|
||||||
-3.0" class="body-link"
|
<a href="#licensing-gpl-3.0" class="body-link">GNU General Public License v3.0</a>,
|
||||||
>GNU General Public License v3.0</a>, and relicensing
|
and relicensing
|
||||||
derivatives under the GNU General Public License v3.0
|
derivatives under the GNU General Public License v3.0
|
||||||
will be disallowed.</p>
|
will be disallowed.</p>
|
||||||
<br>
|
<br>
|
||||||
<h4 id="licensing-preferred-non-code"><a href="#licensing-preferred-non-
|
<h4 id="licensing-preferred-non-code"><a href="#licensing-preferred-non-code" class="h4">Non-code</a></h4>
|
||||||
code" class="h4"
|
<h5 id="licensing-cc-by-4.0"><a href="#licensing-cc-by-4.0" class="h5">Creative Commons Attribution 4.0 International</a></h5>
|
||||||
>Non-code</a></h4>
|
|
||||||
<h5 id="licensing-cc-by-4.0"><a href="#licensing-cc-by-4.0"
|
|
||||||
class="h5"
|
|
||||||
>Creative Commons Attribution 4.0 International</a></h5>
|
|
||||||
<code>SPDX-License-Identifier: CC-BY-4.0</code>
|
<code>SPDX-License-Identifier: CC-BY-4.0</code>
|
||||||
<p>Type: Permissive</p>
|
<p>Type: Permissive</p>
|
||||||
<br>
|
<br>
|
||||||
<p><a href="https://spdx.org/licenses/CC-BY-4.0.html"
|
<p><a href="https://spdx.org/licenses/CC-BY-4.0.html" class="body-link">Creative Commons Attribution 4.0 International</a>
|
||||||
class="body-link"
|
is a
|
||||||
>Creative Commons Attribution 4.0 International</a> is a
|
|
||||||
highly permissive license which allows content licensed
|
highly permissive license which allows content licensed
|
||||||
under it to be used in any way, in any medium, with the
|
under it to be used in any way, in any medium, with the
|
||||||
only restriction being the original copyright notice
|
only restriction being the original copyright notice
|
||||||
must be kept in order to attribute the original creator
|
must be kept in order to attribute the original creator
|
||||||
of the licensed content.</p>
|
of the licensed content.</p>
|
||||||
<br>
|
<br>
|
||||||
<h3 id="licensing-other"><a href="#licensing-other" class="h2"
|
<h3 id="licensing-other"><a href="#licensing-other" class="h2">Other</a></h3>
|
||||||
>Other</a></h3>
|
<h4 id="licensing-other-code"><a href="#licensing-other-code" class="h4">Code</a></h4>
|
||||||
<h4 id="licensing-other-code"><a href="#licensing-other-code" class="h4"
|
<h5 id="licensing-gpl-3.0"><a href="#licensing-gpl-3.0" class="h5">GNU General Public License v3.0</a></h5>
|
||||||
>Code</a></h4>
|
|
||||||
<h5 id="licensing-gpl-3.0"><a href="#licensing-gpl-3.0"
|
|
||||||
class="h5"
|
|
||||||
>GNU General Public License v3.0</a></h5>
|
|
||||||
<code>SPDX-License-Identifier: GPL-3.0-only</code>
|
<code>SPDX-License-Identifier: GPL-3.0-only</code>
|
||||||
<p>Type: Copyleft</p>
|
<p>Type: Copyleft</p>
|
||||||
<br>
|
<br>
|
||||||
<p><a href="https://spdx.org/licenses/GPL-3.0-only.html"
|
<p><a href="https://spdx.org/licenses/GPL-3.0-only.html" class="body-link">GNU General Public License v3.0</a>
|
||||||
class="body-link"
|
is a strong
|
||||||
>GNU General Public License v3.0</a> is a strong
|
|
||||||
copyleft license which restricts usage of content
|
copyleft license which restricts usage of content
|
||||||
licensed under it by requiring all source code of the
|
licensed under it by requiring all source code of the
|
||||||
content to be publicly available, making binary-only
|
content to be publicly available, making binary-only
|
||||||
@ -293,20 +232,13 @@
|
|||||||
only on specific systems, further restricting usage of
|
only on specific systems, further restricting usage of
|
||||||
Inferencium code, it is avoided completely.</p>
|
Inferencium code, it is avoided completely.</p>
|
||||||
<br>
|
<br>
|
||||||
<h4 id="licensing-other-non-code"><a href="#licensing-other-non-code"
|
<h4 id="licensing-other-non-code"><a href="#licensing-other-non-code" class="h4">Non-code</a></h4>
|
||||||
class="h4"
|
<h5 id="licensing-cc-by-nc-4.0"><a href="#licensing-cc-by-nc-4.0" class="h5">Creative Commons Attribution Non Commerical 4.0 International</a></h5>
|
||||||
>Non-code</a></h4>
|
|
||||||
<h5 id="licensing-cc-by-nc-4.0"><a href="#licensing-cc-by-nc-
|
|
||||||
4.0" class="h5"
|
|
||||||
>Creative Commons Attribution Non Commerical 4.0
|
|
||||||
International</a></h5>
|
|
||||||
<code>SPDX-License-Identifier: CC-BY-NC-4.0</code>
|
<code>SPDX-License-Identifier: CC-BY-NC-4.0</code>
|
||||||
<p>Type: Permissive non-commercial</p>
|
<p>Type: Permissive non-commercial</p>
|
||||||
<br>
|
<br>
|
||||||
<p><a href="https://spdx.org/licenses/CC-BY-NC-4.0.html"
|
<p><a href="https://spdx.org/licenses/CC-BY-NC-4.0.html" class="body-link">Creative Commons Attribution Non Commercial 4.0 International</a>
|
||||||
class="body-link"
|
is a permissive license which allows
|
||||||
>Creative Commons Attribution Non Commercial 4.0
|
|
||||||
International</a> is a permissive license which allows
|
|
||||||
content licensed under it to be used in any way, in any
|
content licensed under it to be used in any way, in any
|
||||||
medium, with the restrictions being commercial usage is
|
medium, with the restrictions being commercial usage is
|
||||||
prohibited, and the original copyright notice must be
|
prohibited, and the original copyright notice must be
|
||||||
@ -316,13 +248,10 @@
|
|||||||
preventing Inferencium code from being used for any
|
preventing Inferencium code from being used for any
|
||||||
purpose, specifically preventing commercial usage we do
|
purpose, specifically preventing commercial usage we do
|
||||||
not want to prevent, it is avoided completely.</p>
|
not want to prevent, it is avoided completely.</p>
|
||||||
<h2 id="recommendations"><a href="#recommendations" class="h2"
|
<h2 id="recommendations"><a href="#recommendations" class="h2">Recommendations</a></h2>
|
||||||
>Recommendations</a></h2>
|
|
||||||
<!-- Hardware I recommend as production hardware -->
|
<!-- Hardware I recommend as production hardware -->
|
||||||
<h3 id="hardware"><a href="#hardware" class="h3"
|
<h3 id="hardware"><a href="#hardware" class="h3">Hardware</a></h3>
|
||||||
>Hardware</a></h3>
|
<h4 id="hdw-smartphone"><a href="#hdw-smartphone" class="h4">Smartphone</a></h4>
|
||||||
<h4 id="hdw-smartphone"><a href="#hdw-smartphone" class="h4"
|
|
||||||
>Smartphone</a></h4>
|
|
||||||
<div style="overflow-x:auto;">
|
<div style="overflow-x:auto;">
|
||||||
<table>
|
<table>
|
||||||
<tr>
|
<tr>
|
||||||
@ -335,87 +264,62 @@
|
|||||||
</tr>
|
</tr>
|
||||||
<tr>
|
<tr>
|
||||||
<td class="table-main">Smartphone</td>
|
<td class="table-main">Smartphone</td>
|
||||||
<td class="table-main"><img src="asset/img/google-
|
<td class="table-main"><img src="asset/img/google-pixel_6.png" width="100px" height="100px"/><br>
|
||||||
pixel_6.png"
|
|
||||||
width="100px" height="100px"/><br>
|
|
||||||
<br>
|
<br>
|
||||||
Google Pixel</td>
|
Google Pixel</td>
|
||||||
<td>Google Pixel devices are the best Android devices
|
<td>Google Pixel devices are the best Android devices
|
||||||
available on the market for
|
available on the market for
|
||||||
<a class="body-link" href="https://security.googleblog
|
<a class="body-link" href="https://security.googleblog.com/2021/10/pixel-6-setting-new-standard-for-mobile.html">security and privacy</a>.<br>
|
||||||
.com/2021/10/pixel-6-setting-new-standard-for-mobile
|
|
||||||
.html"
|
|
||||||
>security and privacy</a>.<br>
|
|
||||||
<br>
|
<br>
|
||||||
They allow locking the bootloader with a
|
They allow locking the bootloader with a
|
||||||
<a class="body-link" href="https://android.googlesource
|
<a class="body-link" href="https://android.googlesource.com/platform/external/avb/+/master/README.md#pixel-2-and-later">custom Android Verified Boot (AVB) key</a>
|
||||||
.com/platform/external/avb/+/master/README.md#pixel-2-
|
in order to
|
||||||
and-later"
|
|
||||||
>custom Android Verified Boot (AVB) key</a> in order to
|
|
||||||
preserve security and privacy features when installing a
|
preserve security and privacy features when installing a
|
||||||
custom operating system, such as <a class="body-link"
|
custom operating system, such as
|
||||||
href="https://source.android.com/docs/security/features/
|
<a class="body-link" href="https://source.android.com/docs/security/features/verifiedboot/">verified boot</a>
|
||||||
verifiedboot/"
|
which verifies that the OS has not
|
||||||
>verified boot</a> which verifies that the OS has not
|
|
||||||
been corrupted or tampered with, and
|
been corrupted or tampered with, and
|
||||||
<a class="body-link" href="https://source.android.com/
|
<a class="body-link" href="https://source.android.com/docs/security/features/verifiedboot/verified-boot#rollback-protection">rollback protection</a>
|
||||||
docs/security/features/verifiedboot/verified-boot
|
which prevents an adversary
|
||||||
#rollback-protection"
|
|
||||||
>rollback protection</a> which prevents an adversary
|
|
||||||
from rolling back the OS or firmware version to a
|
from rolling back the OS or firmware version to a
|
||||||
previous version with known security vulnerabilities.<br>
|
previous version with known security vulnerabilities.<br>
|
||||||
<br>
|
<br>
|
||||||
They also include a
|
They also include a
|
||||||
<a class="body-link" href="https://developer.android
|
<a class="body-link" href="https://developer.android.com/training/articles/keystore#HardwareSecurityModule">hardware security module</a>
|
||||||
.com/training/articles/keystore#HardwareSecurityModule"
|
(Titan M2, improving on
|
||||||
>hardware security module</a> (Titan M2, improving on
|
the previous generation
|
||||||
the previous generation <a class="body-link"
|
<a class="body-link" href="https://security.googleblog.com/2018/10/building-titan-better-security-through.html">Titan M</a>)
|
||||||
href="https://security.googleblog.com/2018/10/building-
|
which is extremely resistant to both
|
||||||
titan-better-security-through.html"
|
|
||||||
>Titan M</a>) which is extremely resistant to both
|
|
||||||
remote and physical attacks due to being completely
|
remote and physical attacks due to being completely
|
||||||
isolated from the rest of the system, including the
|
isolated from the rest of the system, including the
|
||||||
operating system. Titan M2 ensures that the device
|
operating system. Titan M2 ensures that the device
|
||||||
cannot be remotely compromised by requiring the side
|
cannot be remotely compromised by requiring the side
|
||||||
buttons of the device to be physically pressed for some
|
buttons of the device to be physically pressed for some
|
||||||
sensitive operations. Titan M2 also takes the role of
|
sensitive operations. Titan M2 also takes the role of
|
||||||
<a class="body-link" href="https://source.android.com/
|
<a class="body-link" href="https://source.android.com/docs/security/best-practices/hardware#strongbox-keymaster">Android StrongBox Keymaster</a>,
|
||||||
docs/security/best-practices/hardware#strongbox-
|
a
|
||||||
keymaster"
|
<a class="body-link" href="https://source.android.com/docs/security/features/keystore">hardware-backed Keystore</a>
|
||||||
>Android StrongBox Keymaster</a>,
|
containing sensitive user
|
||||||
a <a class="body-link" href="https://source.android.com/
|
|
||||||
docs/security/features/keystore"
|
|
||||||
>hardware-backed Keystore</a> containing sensitive user
|
|
||||||
keys which are unavailable to the OS or apps running on
|
keys which are unavailable to the OS or apps running on
|
||||||
it without authorisation from Titan M2 itself.
|
it without authorisation from Titan M2 itself.
|
||||||
<a class="body-link" href="https://android-developers
|
<a class="body-link" href="https://android-developers.googleblog.com/2018/05/insider-attack-resistance.html">Insider attack resistance</a>
|
||||||
.googleblog.com/2018/05/insider-attack-resistance.html"
|
ensures that Titan M2
|
||||||
>Insider attack resistance</a> ensures that Titan M2
|
|
||||||
firmware can be flashed only if the user PIN/password is
|
firmware can be flashed only if the user PIN/password is
|
||||||
already known, making it impossible to backdoor the
|
already known, making it impossible to backdoor the
|
||||||
device without already knowing these secrets.<br>
|
device without already knowing these secrets.<br>
|
||||||
<br>
|
<br>
|
||||||
Google Pixel device kernels are compiled with
|
Google Pixel device kernels are compiled with
|
||||||
<a class="body-link" href="https://android-developers
|
<a class="body-link" href="https://android-developers.googleblog.com/2018/10/control-flow-integrity-in-android-kernel.html">forward-edge control-flow integrity</a>
|
||||||
.googleblog.com/2018/10/control-flow-integrity-in-
|
and
|
||||||
android-kernel.html"
|
<a class="body-link" href="https://security.googleblog.com/2019/10/protecting-against-code-reuse-in-linux_30.html">backward-edge control-flow integrity</a>
|
||||||
>forward-edge control-flow integrity</a> and
|
to prevent
|
||||||
<a class="body-link" href="https://security.googleblog
|
|
||||||
.com/2019/10/protecting-against-code-reuse-in-linux_30
|
|
||||||
.html"
|
|
||||||
>backward-edge control-flow integrity</a> to prevent
|
|
||||||
code reuse attacks against the kernel. MAC address
|
code reuse attacks against the kernel. MAC address
|
||||||
randomisation is
|
randomisation is
|
||||||
<a class="body-link" href="https://android-developers
|
<a class="body-link" href="https://android-developers.googleblog.com/2017/04/changes-to-device-identifiers-in.html">implemented well, along with minimal probe requests and randomised initial sequence numbers</a>.<br>
|
||||||
.googleblog.com/2017/04/changes-to-device-identifiers-in
|
|
||||||
.html"
|
|
||||||
>implemented well, along with minimal probe requests and
|
|
||||||
randomised initial sequence numbers</a>.<br>
|
|
||||||
<br>
|
<br>
|
||||||
Google releases
|
Google releases
|
||||||
<a class="body-link" href="https://source.android.com/
|
<a class="body-link" href="https://source.android.com/docs/security/bulletin/pixel/">guaranteed monthly security updates</a>,
|
||||||
docs/security/bulletin/pixel/"
|
ensuring
|
||||||
>guaranteed monthly security updates</a>, ensuring
|
|
||||||
Google Pixel devices are up-to-date and quickly
|
Google Pixel devices are up-to-date and quickly
|
||||||
protected against security vulnerabilities.<br>
|
protected against security vulnerabilities.<br>
|
||||||
<br>
|
<br>
|
||||||
@ -425,30 +329,23 @@
|
|||||||
ARM-based Titan M with RISC-V-based Titan M2, reducing
|
ARM-based Titan M with RISC-V-based Titan M2, reducing
|
||||||
trust by removing ARM from the equation. Titan M2 is
|
trust by removing ARM from the equation. Titan M2 is
|
||||||
more resiliant to attacks than Titan M, and is
|
more resiliant to attacks than Titan M, and is
|
||||||
<a class="body-link" href="https://www.tuv-nederland.nl/
|
<a class="body-link" href="https://www.tuv-nederland.nl/assets/files/cerfiticaten/2022/09/nscib-cc-22-0228971-cert-final.pdf">AVA_VAN.5 certified</a>,
|
||||||
assets/files/cerfiticaten/2022/09/nscib-cc-22-0228971-
|
the highest level of
|
||||||
cert-final.pdf"
|
|
||||||
>AVA_VAN.5 certified</a>, the highest level of
|
|
||||||
vulnerability assessment. Google's in-house Tensor SoC
|
vulnerability assessment. Google's in-house Tensor SoC
|
||||||
includes Tensor Security Core, further improving device
|
includes Tensor Security Core, further improving device
|
||||||
security.<br>
|
security.<br>
|
||||||
<br>
|
<br>
|
||||||
Pixel 6-series and 7-series devices are supported for a
|
Pixel 6-series and 7-series devices are supported for a
|
||||||
<a class="body-link" href="https://support.google.com/
|
<a class="body-link" href="https://support.google.com/nexus/answer/4457705#zippy=%2Cpixel-and-later">minimum of 5 years from launch</a>,
|
||||||
nexus/answer/4457705#zippy=%2Cpixel-and-later"
|
an increase from
|
||||||
>minimum of 5 years from launch</a>, an increase from
|
|
||||||
previous generations'
|
previous generations'
|
||||||
<a class="body-link" href="https://support.google.com/
|
<a class="body-link" href="https://support.google.com/nexus/answer/4457705#zippy=%2Cpixel-xl-a-a-g-and-a-g">support lifecycles of 3 years</a>.</td>
|
||||||
nexus/answer/4457705#zippy=%2Cpixel-xl-a-a-g-and-a-g"
|
|
||||||
>support lifecycles of 3 years</a>.</td>
|
|
||||||
</tr>
|
</tr>
|
||||||
</table>
|
</table>
|
||||||
</div>
|
</div>
|
||||||
<!-- Software I recommend as production software -->
|
<!-- Software I recommend as production software -->
|
||||||
<h3 id="software"><a href="#software" class="h3"
|
<h3 id="software"><a href="#software" class="h3">Software</a></h3>
|
||||||
>Software</a></h3>
|
<h4 id="sfw-desktop"><a href="#sfw-desktop" class="h4">Desktop</a></h4>
|
||||||
<h4 id="sfw-desktop"><a href="#sfw-desktop" class="h4"
|
|
||||||
>Desktop</a></h4>
|
|
||||||
<div style="overflow-x:auto;">
|
<div style="overflow-x:auto;">
|
||||||
<table>
|
<table>
|
||||||
<tr>
|
<tr>
|
||||||
@ -461,12 +358,11 @@
|
|||||||
</tr>
|
</tr>
|
||||||
<tr>
|
<tr>
|
||||||
<td class="table-main">Operating system</td>
|
<td class="table-main">Operating system</td>
|
||||||
<td class="table-main"><img src="asset/img/logo-
|
<td class="table-main"><img src="asset/img/logo-gentoo_linux.png" width="100px" height="100px"/><br>
|
||||||
gentoo_linux.png" width="100px" height="100px"/><br>
|
|
||||||
<br>
|
<br>
|
||||||
Gentoo Linux</td>
|
Gentoo Linux</td>
|
||||||
<td><a class="body-link" href="https://www.gentoo.org/"
|
<td><a class="body-link" href="https://www.gentoo.org/">Gentoo Linux</a>
|
||||||
>Gentoo Linux</a> is a highly modular, source-based,
|
is a highly modular, source-based,
|
||||||
Linux-based operating system which allows vast
|
Linux-based operating system which allows vast
|
||||||
customisation to tailor the operating system to suit
|
customisation to tailor the operating system to suit
|
||||||
your specific needs. There are many advantages to such
|
your specific needs. There are many advantages to such
|
||||||
@ -480,59 +376,43 @@
|
|||||||
hardening, placing performance below those aspects,
|
hardening, placing performance below those aspects,
|
||||||
although my system is still very performant. Some of the
|
although my system is still very performant. Some of the
|
||||||
hardening I apply includes
|
hardening I apply includes
|
||||||
<a class="body-link" href="https://en.wikipedia.org/
|
<a class="body-link" href="https://en.wikipedia.org/wiki/Buffer_overflow_protection">stack protection</a>,
|
||||||
wiki/Buffer_overflow_protection"
|
<a class="body-link" href="https://en.wikipedia.org/wiki/Integer_overflow">signed integer overflow wrapping</a>,
|
||||||
>stack protection</a>,
|
and GrapheneOS'
|
||||||
<a class="body-link" href="https://en.wikipedia.org/
|
<a class="body-link" href="https://github.com/GrapheneOS/hardened_malloc/">hardened_malloc</a>
|
||||||
wiki/Integer_overflow"
|
memory allocator.<br>
|
||||||
>signed integer overflow wrapping</a>, and GrapheneOS'
|
|
||||||
<a class="body-link" href="https://github.com/
|
|
||||||
GrapheneOS/hardened_malloc/"
|
|
||||||
>hardened_malloc</a> memory allocator.<br>
|
|
||||||
<br>
|
<br>
|
||||||
You can find Inferencium's Gentoo Linux configurations
|
You can find Inferencium's Gentoo Linux configurations
|
||||||
in Inferencium's
|
in Inferencium's
|
||||||
<a class="body-link" href="https://src.inferencium.net/
|
<a class="body-link" href="https://src.inferencium.net/Inferencium/cfg/">configuration respository</a>.</td>
|
||||||
Inferencium/cfg/"
|
|
||||||
>configuration respository</a>.</td>
|
|
||||||
<td class="table-main">Open source<br>
|
<td class="table-main">Open source<br>
|
||||||
<br>
|
<br>
|
||||||
(GPL-2.0-only)</td>
|
(GPL-2.0-only)</td>
|
||||||
</tr>
|
</tr>
|
||||||
<tr>
|
<tr>
|
||||||
<td class="table-main">Web browser</td>
|
<td class="table-main">Web browser</td>
|
||||||
<td class="table-main"><img src="asset/img/logo-chromium
|
<td class="table-main"><img src="asset/img/logo-chromium.png" width="100px" height="100px"/><br>
|
||||||
.png" width="100px" height="100px"/><br>
|
|
||||||
<br>
|
<br>
|
||||||
Chromium</td>
|
Chromium</td>
|
||||||
<td><a class="body-link" href="https://chromium.org/"
|
<td><a class="body-link" href="https://chromium.org/">Chromium</a>
|
||||||
>Chromium</a> is a highly secure web browser which is
|
is a highly secure web browser which is
|
||||||
often ahead of other web browsers in security aspects.
|
often ahead of other web browsers in security aspects.
|
||||||
It has a dedicated security team and a very impressive
|
It has a dedicated security team and a very impressive
|
||||||
<a class="body-link" href="https://www.chromium.org/
|
<a class="body-link" href="https://www.chromium.org/Home/chromium-security/brag-sheet/">security brag sheet</a>.
|
||||||
Home/chromium-security/brag-sheet/"
|
|
||||||
>security brag sheet</a>.
|
|
||||||
Chromium's security features include a strong
|
Chromium's security features include a strong
|
||||||
<a class="body-link" href="https://code.google.com/p/
|
<a class="body-link" href="https://code.google.com/p/chromium/wiki/LinuxSandboxing">multi-layer sandbox</a>,
|
||||||
chromium/wiki/LinuxSandboxing"
|
strong
|
||||||
>multi-layer sandbox</a>,
|
<a class="body-link" href="https://www.chromium.org/Home/chromium-security/site-isolation">site isolation</a>,
|
||||||
strong <a class="body-link" href="https://www.chromium
|
<a class="body-link" href="https://www.chromium.org/Home/chromium-security/binding-integrity">Binding Integrity</a>
|
||||||
.org/Home/chromium-security/site-isolation"
|
memory hardening, and
|
||||||
>site isolation</a>,
|
<a class="body-link" href="https://www.chromium.org/developers/testing/control-flow-integrity/">control-flow integrity (CFI)</a>.</td>
|
||||||
<a class="body-link" href="https://www.chromium.org/
|
|
||||||
Home/chromium-security/binding-integrity"
|
|
||||||
>Binding Integrity</a> memory hardening, and
|
|
||||||
<a class="body-link" href="https://www.chromium.org/
|
|
||||||
developers/testing/control-flow-integrity/"
|
|
||||||
>control-flow integrity (CFI)</a>.</td>
|
|
||||||
<td class="table-main">Open source<br>
|
<td class="table-main">Open source<br>
|
||||||
<br>
|
<br>
|
||||||
(BSD-3-Clause)</td>
|
(BSD-3-Clause)</td>
|
||||||
</tr>
|
</tr>
|
||||||
</table>
|
</table>
|
||||||
</div>
|
</div>
|
||||||
<h4 id="sfw-smartphone"><a href="#sfw-smartphone" class="h4"
|
<h4 id="sfw-smartphone"><a href="#sfw-smartphone" class="h4">Smartphone</a></h4>
|
||||||
>Smartphone</a></h4>
|
|
||||||
<div style="overflow-x:auto;">
|
<div style="overflow-x:auto;">
|
||||||
<table>
|
<table>
|
||||||
<tr>
|
<tr>
|
||||||
@ -545,12 +425,11 @@
|
|||||||
</tr>
|
</tr>
|
||||||
<tr>
|
<tr>
|
||||||
<td class="table-main">Operating system</td>
|
<td class="table-main">Operating system</td>
|
||||||
<td class="table-main"><img src="asset/img/logo-
|
<td class="table-main"><img src="asset/img/logo-grapheneos.png" width="100px" height="100px"/><br>
|
||||||
grapheneos.png" width="100px" height="100px"/><br>
|
|
||||||
<br>
|
<br>
|
||||||
GrapheneOS</td>
|
GrapheneOS</td>
|
||||||
<td><a class="body-link" href="https://grapheneos.org/"
|
<td><a class="body-link" href="https://grapheneos.org/">GrapheneOS</a>
|
||||||
>GrapheneOS</a> is a security-hardened,
|
is a security-hardened,
|
||||||
privacy-hardened, secure-by-default, Android-based
|
privacy-hardened, secure-by-default, Android-based
|
||||||
operating system which implements extensive, systemic
|
operating system which implements extensive, systemic
|
||||||
security and privacy hardening to the Android Open
|
security and privacy hardening to the Android Open
|
||||||
@ -559,38 +438,30 @@
|
|||||||
system information, a secure app spawning feature which
|
system information, a secure app spawning feature which
|
||||||
avoids sharing address space layout and other secrets
|
avoids sharing address space layout and other secrets
|
||||||
AOSP's default Zygote app spawning model would share,
|
AOSP's default Zygote app spawning model would share,
|
||||||
<a class="body-link" href="https://github.com/
|
<a class="body-link" href="https://github.com/GrapheneOS/kernel_gs-gs101/">hardened kernel</a>,
|
||||||
GrapheneOS/kernel_gs-gs101/"
|
hardened memory allocator
|
||||||
>hardened kernel</a>, hardened memory allocator
|
(<a class="body-link" href="https://github.com/GrapheneOS/hardened_malloc/">hardened_malloc</a>)
|
||||||
(<a class="body-link" href="https://github.com/
|
to protect against common memory
|
||||||
GrapheneOS/hardened_malloc/"
|
|
||||||
>hardened_malloc</a>) to protect against common memory
|
|
||||||
corruption vulnerabilties,
|
corruption vulnerabilties,
|
||||||
<a class="body-link" href="https://github.com/
|
<a class="body-link" href="https://github.com/GrapheneOS/platform_bionic/">hardened Bionic standard C library</a>,
|
||||||
GrapheneOS/platform_bionic/"
|
<a class="body-link" href="https://github.com/GrapheneOS/platform_system_sepolicy/">stricter SELinux policies</a>,
|
||||||
>hardened Bionic standard C library</a>,
|
and local and remote
|
||||||
<a class="body-link" href="https://github.com/
|
|
||||||
GrapheneOS/platform_system_sepolicy/"
|
|
||||||
>stricter SELinux policies</a>, and local and remote
|
|
||||||
hardware-backed attestation
|
hardware-backed attestation
|
||||||
(<a class="body-link" href="https://attestation.app/
|
(<a class="body-link" href="https://attestation.app/about/">Auditor</a>)
|
||||||
about/"
|
to ensure the OS has not been corrupted or
|
||||||
>Auditor</a>) to ensure the OS has not been corrupted or
|
|
||||||
tampered with.<br>
|
tampered with.<br>
|
||||||
<br>
|
<br>
|
||||||
GrapheneOS only supports
|
GrapheneOS only supports
|
||||||
<a class="body-link" href="https://grapheneos.org/faq
|
<a class="body-link" href="https://grapheneos.org/faq#device-support">high security and well-supported devices</a>
|
||||||
#device-support"
|
which
|
||||||
>high security and well-supported devices</a> which
|
|
||||||
receive full support from their manufacturers, including
|
receive full support from their manufacturers, including
|
||||||
firmware updates, long support lifecycles, secure
|
firmware updates, long support lifecycles, secure
|
||||||
hardware, and overall high security practices.<br>
|
hardware, and overall high security practices.<br>
|
||||||
<br>
|
<br>
|
||||||
For an extensive list of features GrapheneOS provides,
|
For an extensive list of features GrapheneOS provides,
|
||||||
visit its
|
visit its
|
||||||
<a class="body-link" href="https://grapheneos.org/
|
<a class="body-link" href="https://grapheneos.org/features/">official features list</a>
|
||||||
features/"
|
which provides extensive
|
||||||
>official features list</a> which provides extensive
|
|
||||||
documentation.</td>
|
documentation.</td>
|
||||||
<td class="table-main">Open source<br>
|
<td class="table-main">Open source<br>
|
||||||
<br>
|
<br>
|
||||||
@ -598,8 +469,7 @@
|
|||||||
</tr>
|
</tr>
|
||||||
<tr>
|
<tr>
|
||||||
<td class="table-main">Web browser</td>
|
<td class="table-main">Web browser</td>
|
||||||
<td class="table-main"><img src="asset/img/logo-vanadium
|
<td class="table-main"><img src="asset/img/logo-vanadium.png" width="100px" height="100px"/><br>
|
||||||
.png" width="100px" height="100px"/><br>
|
|
||||||
<br>
|
<br>
|
||||||
Vanadium</td>
|
Vanadium</td>
|
||||||
<td>Vanadium is a security-hardened, privacy-hardened
|
<td>Vanadium is a security-hardened, privacy-hardened
|
||||||
@ -608,59 +478,38 @@
|
|||||||
defenses to the already very secure Chromium web
|
defenses to the already very secure Chromium web
|
||||||
browser. Its hardening alongside Chromium's base
|
browser. Its hardening alongside Chromium's base
|
||||||
security features includes
|
security features includes
|
||||||
<a class="body-link" href="https://github.com/
|
<a class="body-link" href="https://github.com/GrapheneOS/Vanadium/blob/13/patches/0081-Implement-UI-for-JIT-site-settings.patch">disabling JavaScript just-in-time (JIT) compilation by default</a>,
|
||||||
GrapheneOS/Vanadium/blob/13/patches/0081-Implement-UI-
|
<a class="body-link" href="https://github.com/GrapheneOS/Vanadium/blob/13/patches/0051-stub-out-the-battery-status-API.patch">stubbing out the battery status API to prevent abuse of it</a>,
|
||||||
for-JIT-site-settings.patch"
|
and
|
||||||
>disabling JavaScript just-in-time (JIT) compilation by
|
<a class="body-link" href="https://github.com/GrapheneOS/Vanadium/blob/13/patches/0084-Toggle-for-navigating-external-URL-in-incognito.patch">always-on Incognito mode as an option</a>.<br>
|
||||||
default</a>,
|
|
||||||
<a class="body-link" href="https://github.com/
|
|
||||||
GrapheneOS/Vanadium/blob/13/patches/0051-stub-out-the-
|
|
||||||
battery-status-API.patch"
|
|
||||||
>stubbing out the battery status API to prevent abuse of
|
|
||||||
it</a>, and
|
|
||||||
<a class="body-link" href="https://github.com/
|
|
||||||
GrapheneOS/Vanadium/blob/13/patches/0084-Toggle-for-
|
|
||||||
navigating-external-URL-in-incognito.patch"
|
|
||||||
>always-on Incognito mode as an option</a>.<br>
|
|
||||||
<br>
|
<br>
|
||||||
Vanadium's source code, including its Chromium patchset,
|
Vanadium's source code, including its Chromium patchset,
|
||||||
can be found in its
|
can be found in its
|
||||||
<a class="body-link" href="https://github.com/
|
<a class="body-link" href="https://github.com/GrapheneOS/Vanadium/">official repository</a>.</td>
|
||||||
GrapheneOS/Vanadium/"
|
|
||||||
>official repository</a>.</td>
|
|
||||||
<td class="table-main">Open source<br>
|
<td class="table-main">Open source<br>
|
||||||
<br>
|
<br>
|
||||||
(GPL-2.0-only)</td>
|
(GPL-2.0-only)</td>
|
||||||
</tr>
|
</tr>
|
||||||
<tr>
|
<tr>
|
||||||
<td class="table-main">Messenger</td>
|
<td class="table-main">Messenger</td>
|
||||||
<td class="table-main"><img src="asset/img/logo-molly
|
<td class="table-main"><img src="asset/img/logo-molly.png" width="100px" height="100px"><br>
|
||||||
.png" width="100px" height="100px"><br>
|
|
||||||
<br>
|
<br>
|
||||||
Molly</td>
|
Molly</td>
|
||||||
<td><a class="body-link" href="https://molly.im/"
|
<td><a class="body-link" href="https://molly.im/">Molly</a>
|
||||||
>Molly</a> is a security-hardened, privacy-hardened
|
is a security-hardened, privacy-hardened
|
||||||
<a class="body-link" href="https://signal.org/"
|
<a class="body-link" href="https://signal.org/">Signal</a>
|
||||||
>Signal</a> client which hardens Signal by using a
|
client which hardens Signal by using a
|
||||||
variety of
|
variety of
|
||||||
<a class="body-link" href="https://github.com/mollyim/
|
<a class="body-link" href="https://github.com/mollyim/mollyim-android#features">unique features</a>,
|
||||||
mollyim-android#features"
|
allowing
|
||||||
>unique features</a>, allowing
|
<a class="body-link" href="https://github.com/mollyim/mollyim-android/wiki/Data-Encryption-At-Rest">locking the database when not in use</a>,
|
||||||
<a class="body-link" href="https://github.com/mollyim/
|
and
|
||||||
mollyim-android/wiki/Data-Encryption-At-Rest"
|
<a class="body-link" href="https://github.com/mollyim/mollyim-android/blob/a81ff7d120adc9d427be17239107343146bad704/app/src/main/java/org/thoughtcrime/securesms/crypto/MasterSecretUtil.java#L91">utilising Android StrongBox</a>
|
||||||
>locking the database when not in use</a>, and
|
to protect user keys
|
||||||
<a class="body-link" href="https://github.com/mollyim/
|
|
||||||
mollyim-android/blob/
|
|
||||||
a81ff7d120adc9d427be17239107343146bad704/app/src/main/
|
|
||||||
java/org/thoughtcrime/securesms/crypto/MasterSecretUtil
|
|
||||||
.java#L91"
|
|
||||||
>utilising Android StrongBox</a> to protect user keys
|
|
||||||
using the device's hardware security module.<br>
|
using the device's hardware security module.<br>
|
||||||
<br>
|
<br>
|
||||||
Molly is available in
|
Molly is available in
|
||||||
<a class="body-link" href="https://github.com/mollyim/
|
<a class="body-link" href="https://github.com/mollyim/mollyim-android#free-and-open-source">2 flavours</a>:<br>
|
||||||
mollyim-android#free-and-open-source"
|
|
||||||
>2 flavours</a>:<br>
|
|
||||||
<ul>
|
<ul>
|
||||||
<li>Molly, which includes the same
|
<li>Molly, which includes the same
|
||||||
proprietary Google code as Signal to
|
proprietary Google code as Signal to
|
||||||
@ -677,15 +526,13 @@
|
|||||||
</tr>
|
</tr>
|
||||||
<tr>
|
<tr>
|
||||||
<td class="table-main">Messenger</td>
|
<td class="table-main">Messenger</td>
|
||||||
<td class="table-main"><img src="asset/img/logo-
|
<td class="table-main"><img src="asset/img/logo-conversations.png" width="100px" height="100px"><br>
|
||||||
conversations.png" width="100px" height="100px"><br>
|
|
||||||
<br>
|
<br>
|
||||||
Conversations</td>
|
Conversations</td>
|
||||||
<td><a class="body-link" href="https://conversations
|
<td><a class="body-link" href="https://conversations.im/">Conversations</a>
|
||||||
.im/"
|
is a well-designed Android
|
||||||
>Conversations</a> is a well-designed Android
|
<a class="body-link" href="https://xmpp.org/">XMPP</a>
|
||||||
<a class="body-link" href="https://xmpp.org/"
|
client which serves as the de facto XMPP
|
||||||
>XMPP</a> client which serves as the de facto XMPP
|
|
||||||
reference client and has great usability.</td>
|
reference client and has great usability.</td>
|
||||||
<td class="table-main">Open source<br>
|
<td class="table-main">Open source<br>
|
||||||
<br>
|
<br>
|
||||||
@ -693,10 +540,8 @@
|
|||||||
</tr>
|
</tr>
|
||||||
</table>
|
</table>
|
||||||
</div>
|
</div>
|
||||||
<h3 id="music"><a href="#music" class="h3"
|
<h3 id="music"><a href="#music" class="h3">Music</a></h3>
|
||||||
>Music</a></h3>
|
|
||||||
<p>For a curated list of music I enjoy, visit my
|
<p>For a curated list of music I enjoy, visit my
|
||||||
<a href="music.html" class="body-link"
|
<a href="music.html" class="body-link">music page</a>.</p>
|
||||||
>music page</a>.</p>
|
|
||||||
</body>
|
</body>
|
||||||
</html>
|
</html>
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user