Inferencium@@ -30,56 +29,39 @@
About
Table of Contents
- About Me
- Licensing
- Preferred +
- Code -
- Other +
- Non-code
- Recommendations
- Hardware
- Smartphone +
- Smartphone
- Software
- Desktop -
- Smartphone +
- Desktop +
- Smartphone
- Music +
- Music
-
-
-
-
-
-
About Me
-I am Jake Winters, also known by my pseudonym "Inference", a cybersecurity researcher +
I am Jake Winters, also known by my pseudonym "Inference", a security researcher
based in United Kingdom.
I am the founder, lead developer, and administrator, of Inferencium.
All opinions are my own, and are not necessarily shared with projects or people I am
@@ -95,170 +77,97 @@
disabled users.
I am also a modular design advocate for the ability to securely and robustly make
changes to hardware and software without the entire system being affected.
If you want to contact me for any reason, you can use my - contact methods.
I run the public Systems Hardening XMPP channel dedicated to systems security and
privacy hardening at sys-hardening@muc.xmpp.inferencium.net, and its
respective off-topic channel at
sys-hardening-ot@muc.xmpp.inferencium.net.
If you wish to contact me for any reason, you can use my + contact methods.
Licensing
-Inferencium cares about upstreaming and sharing code, strongly preferring licenses which +
I care about upstreaming and sharing code, strongly preferring licenses which have high license compatibility in order to permit sharing code with as many other projects - as possible; for this reason, permissive licenses are our preferred choice, while avoiding - copyleft licenses and other licenses which place restrictions on how our code may be used, - and prevent us from including important proprietary code, such as firmware, which can patch - security vulnerabilities, privacy issues, and stability issues. All Inferencium code is and + as possible; for this reason, permissive licenses are my preferred choice, while avoiding + copyleft licenses and other licenses which place restrictions on how my code may be used, + and prevent me from including important proprietary code, such as firmware, which can patch + security vulnerabilities, privacy issues, and stability issues. All of my code is and will be permissively licensed unless specific circumstances make it impractical or - infeasible to do so. Our goal is to share code which has the least amount of restrictions as - possible, to allow wider propagation of our code and allow more use cases and possibilities, + infeasible to do so. My goal is to share code which has the least amount of restrictions as + possible, to allow wider propagation of my code and allow more use cases and possibilities, as well as ensuring proprietary code, whenever required, is permitted to be included.
+My preferred licenses and rationale for using them are below; any licenses + not listed are chosen on a case-by-case basis.
ISO 5962:2021
is used for licensing, in the format
SPDX-License-Identifier: <license>; see the
SPDX license list
for the full list of available licenses under this standard.
Preferred
-Code
-BSD 3-Clause Clear License
-SPDX-License-Identifier: BSD-3-Clause-Clear
- Type: Permissive
--
BSD 3-Clause Clear License
- is a highly permissive
- license which allows content licensed under it to be
- used in any way, whether in source or binary form, and
- allows sublicensing under a different license, with the
- only restrictions being the original copyright notice
- must be kept in order to attribute the original creator
- of the licensed content, and the name of the project
- and/or its contributors may not be used to endorse or
- promote products derived from the original project.
- BSD 3-Clause Clear License is a derivative of
- BSD 3-Clause "New" or "Revised" License,
- which adds
- an explicit statement clarifying that patent rights are
- not granted by the license alone, and must be granted
- separately by the copyright and/or patent holder(s). We
- prefer this license over the BSD 3-Clause "New" or
- "Revised" License due to this explicit statement which
- removes any possibility of debate and misunderstanding
- in regards to patents applied to code using the BSD
- 3-Clause "New" or "Revised" License.
-
MIT License
-SPDX-License-Identifier: MIT
- Type: Permissive
--
MIT License
- is a highly permissive license which
- allows content licensed under it to be used in any way,
- whether in source or binary form, and allows
- sublicensing under a different license, with the only
- restriction being the original copyright notice must be
- kept in order to attribute the original creator of the
- licensed content.
- Due to this license allowing the original project's name
- and/or contributors to be used to endorse or promote
- products derived from the original project, unless an
- explicit statement is made alongside this license,
- increasing complexity and deviating from the standard
- license text, we prefer
- BSD 3-Clause Clear License;
- however, MIT License is
- a great choice when derivatives using the name of the
- original project and/or its contributors is a non-issue.
-
GNU General Public License v2.0
-SPDX-License-Identifier: GPL-2.0-only
- Type: Copyleft
--
GNU General Public License v2.0
- is a strong
- copyleft license which restricts use of content licensed
- under it by requiring all source code of the content to
- be publicly available, making binary-only form and
- inclusion of proprietary code impossible, requiring all
- derivatives to be licensed under the same license
- (allowing sublicensing under only newer GPL licenses if
- GPL-2.0-or-later is specified in the SPDX-
- License-Identifier), and requiring the original
- copyright notice to be kept in order to attribute the
- original creator of the licensed content.
- Due to the restrictive and invasive nature of this
- license, it is avoided unless such restrictions would be
- beneficial to Inferencium code; whenever this is the
- case, the GNU General Public License v2.0 will be used,
- rather than the more restrictive
- GNU General Public License v3.0,
- and relicensing
- derivatives under the GNU General Public License v3.0
- will be disallowed.
-
Non-code
-Creative Commons Attribution 4.0 International
-SPDX-License-Identifier: CC-BY-4.0
- Type: Permissive
--
Creative Commons Attribution 4.0 International - is a - highly permissive license which allows content licensed - under it to be used in any way, in any medium, with the - only restriction being the original copyright notice - must be kept in order to attribute the original creator - of the licensed content.
--
Other
-Code
-GNU General Public License v3.0
-SPDX-License-Identifier: GPL-3.0-only
- Type: Copyleft
--
GNU General Public License v3.0
- is a strong
- copyleft license which restricts usage of content
- licensed under it by requiring all source code of the
- content to be publicly available, making binary-only
- form and inclusion of proprietary code impossible,
- requiring all derivatives to be licensed under the same
- license (allowing sublicensing under only newer GPL
- licenses if GPL-3.0-or-later is specified
- in the SPDX-License-Identifier), requiring the content
- to be made available only on systems which allow
- modifying the content, such as systems with
- unlocked/unlockable bootloaders and/or which are
- unsigned by the OEM, and requiring the original
- copyright notice to be kept in order to attribute the
- original creator of the licensed content.
- Due to the restrictive and invasive nature of this
- license, and the fact it requires code to be included
- only on specific systems, further restricting usage of
- Inferencium code, it is avoided completely.
-
Non-code
-Creative Commons Attribution Non Commerical 4.0 International
-SPDX-License-Identifier: CC-BY-NC-4.0
- Type: Permissive non-commercial
--
Creative Commons Attribution Non Commercial 4.0 International - is a permissive license which allows - content licensed under it to be used in any way, in any - medium, with the restrictions being commercial usage is - prohibited, and the original copyright notice must be - kept in order to attribute the original creator of the - licensed content. - Due to the non-commercial restriction of this license - preventing Inferencium code from being used for any - purpose, specifically preventing commercial usage we do - not want to prevent, it is avoided completely.
+Code
+BSD 3-Clause Clear License
+SPDX-License-Identifier: BSD-3-Clause-Clear
+ Type: Permissive
+BSD 3-Clause Clear License
+ is a highly permissive
+ license which allows content licensed under it to be
+ used in any way, whether in source or binary form, and
+ allows sublicensing under a different license, with the
+ only restrictions being the original copyright notice
+ must be kept in order to attribute the original creator
+ of the licensed content, and the name of the project
+ and/or its contributors may not be used to endorse or
+ promote products derived from the original project.
+ BSD 3-Clause Clear License is a derivative of
+ BSD 3-Clause "New" or "Revised" License,
+ which adds
+ an explicit statement clarifying that patent rights are
+ not granted by the license alone, and must be granted
+ separately by the copyright and/or patent holder(s). I
+ prefer this license over the BSD 3-Clause "New" or
+ "Revised" License due to this explicit statement which
+ removes any possibility of debate and misunderstanding
+ in regards to patents applied to code using the BSD
+ 3-Clause "New" or "Revised" License.
GNU General Public License v2.0
+SPDX-License-Identifier: GPL-2.0-only
+ Type: Copyleft
+GNU General Public License v2.0
+ is a strong
+ copyleft license which restricts use of content licensed
+ under it by requiring all source code of the content to
+ be publicly available, making binary-only form and
+ inclusion of proprietary code impossible, requiring all
+ derivatives to be licensed under the same license
+ (allowing sublicensing under only newer GPL licenses if
+ GPL-2.0-or-later is specified in the SPDX-
+ License-Identifier), and requiring the original
+ copyright notice to be kept in order to attribute the
+ original creator of the licensed content.
+ Due to the restrictive and invasive nature of this
+ license, it is avoided unless such restrictions would be
+ beneficial to my code; whenever this is the
+ case, the GNU General Public License v2.0 will be used,
+ rather than the more restrictive
+ GNU General Public License v3.0,
+ and relicensing
+ derivatives under the GNU General Public License v3.0
+ will be disallowed.
Non-code
+Creative Commons Attribution 4.0 International
+SPDX-License-Identifier: CC-BY-4.0
+ Type: Permissive
+Creative Commons Attribution 4.0 International + is a + highly permissive license which allows content licensed + under it to be used in any way, in any medium, with the + only restriction being the original copyright notice + must be kept in order to attribute the original creator + of the licensed content.
Recommendations
-Hardware
-Smartphone
-Smartphone
| Type | @@ -348,11 +257,8 @@ support lifecycles of 3 years.
|---|
Software
-Desktop
-Desktop
| Type | @@ -388,8 +294,8 @@ hardened_malloc memory allocator.Open source @@ -417,9 +323,7 @@ (BSD-3-Clause) |
|---|
Smartphone
-Smartphone
| Type | @@ -545,7 +449,6 @@ (GPL-3.0-only)
|---|