I am Jake Winters, also known by my pseudonym "Inference", a security
- researcher based in United Kingdom.
- I am the founder, lead developer, and administrator, of Inferencium.
+ researcher based in United Kingdom.
+ I am the founder, lead developer, and administrator, of Inferencium.
All opinions are my own, and are not necessarily shared with projects or people
I am affiliated with.
I write about my research and experience in cybersecurity and also physical
@@ -79,18 +79,18 @@
about other aspects of my life.
I am an open source advocate for the preservation and modifiability of source
code. I believe source code should be considered human knowledge as much as past
- knowledge and teachings were; it is how modern humanity survives and runs.
+ knowledge and teachings were; it is how modern humanity survives and runs.
Source code being modifiable allows it to be adapted for use by anyone, whether
to add features, harden it for increased security and/or privacy, or provide
- accessibility for disabled users.
+ accessibility for disabled users.
I am also a modular design advocate for the ability to securely and robustly
make changes to hardware and software without the entire system being
affected.
I run multiple XMPP channels; a directory of channels can be found on the
- directory
+ directory
webpage.
It's just Linux. GNU is completely unrelated to Linux, which is a
kernel developed by Linus Torvalds. Linux can be used entirely without
@@ -153,7 +153,7 @@
specified in the SPDX license identifier), and requiring
the original copyright notice to be kept in order to
attribute the original creator of the licensed
- content.
+ content.
Due to the restrictive and invasive nature of this
license, it is avoided unless such restrictions would be
beneficial to my code; whenever this is the case, the
@@ -202,11 +202,11 @@
hardware-acceleration, and ChaCha20-Poly1305 for devices without
AES hardware-acceleration, with AES-128-GCM as a fallback
(AES-128-GCM is mandated for TLS 1.3 by
- IETF RFC8446 section 9.1)
+ IETF RFC8446 section 9.1)
Referrer headers disabled to prevent knowing where a user
@@ -230,13 +230,13 @@
Type |
Hardware |
Description |
- Source model
+ | Source model
(License) |
Smartphone |
- 
+ 
Google Pixel
|
@@ -320,7 +320,7 @@
minimum of 3 years from launch.
Pixel 6-series, Pixel 7-series, Pixel
Fold, and Pixel Tablet, are supported for a
- minimum of 5 years from launch.
+ minimum of 5 years from launch.
Pixel 8-series is supported for a
minimum of 7 years from launch,
putting it on the same support level as
@@ -341,13 +341,13 @@
| Type |
Software |
Description |
- Source model
+ | Source model
(License) |
Operating system |
- 
+ 
Gentoo Linux
|
@@ -370,18 +370,18 @@
and GrapheneOS'
hardened_malloc
memory allocator.
- You can find my Gentoo Linux configurations in my
+ You can find my Gentoo Linux configurations in my
configuration respository.
|
- Open-source
+ Open-source
(GPL-2.0-only)
|
Web browser |
- 
+ 
Chromium
|
@@ -398,7 +398,7 @@
memory hardening, and
control-flow integrity (CFI). |
- Open-source
+ Open-source
(BSD-3-Clause)
|
@@ -411,14 +411,13 @@
Type |
Software |
Description |
- Source model
+ | Source model
(License) |
Operating system |
- 
-
+ 
GrapheneOS
|
@@ -456,14 +455,14 @@
which provides extensive documentation.
|
- Open-source
+ Open-source
(MIT)
|
Web browser |
- 
+ 
Vanadium
|
@@ -481,14 +480,14 @@
patch-set, can be found in its
official repository. |
- Open-source
+ Open-source
(GPL-2.0-only)
|
Messenger |
- 
+ 
Molly
|
@@ -516,13 +515,13 @@
|
- Open-source
+ Open-source
(GPL-3.0-only)
|
- 
+ 
Conversations
|
@@ -533,7 +532,7 @@
client and has great usability.
|
- Open-source
+ Open-source
(GPL-3.0-only)
|
@@ -543,7 +542,7 @@
diff --git a/blog.html b/blog.html
deleted file mode 100644
index cf23e9c..0000000
--- a/blog.html
+++ /dev/null
@@ -1,53 +0,0 @@
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- Inferencium - Blog
-
-
-
- Blog
-
-
-
diff --git a/blog.xhtml b/blog.xhtml
new file mode 100644
index 0000000..3ce93a6
--- /dev/null
+++ b/blog.xhtml
@@ -0,0 +1,53 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Inferencium - Blog
+
+
+
+ Blog
+
+
+
diff --git a/blog/foss_is_working_against_itself.html b/blog/foss_is_working_against_itself.xhtml
similarity index 92%
rename from blog/foss_is_working_against_itself.html
rename to blog/foss_is_working_against_itself.xhtml
index b1b9ac0..f8bbf71 100644
--- a/blog/foss_is_working_against_itself.html
+++ b/blog/foss_is_working_against_itself.xhtml
@@ -1,13 +1,13 @@
-
+
-
+
@@ -16,23 +16,23 @@
Blog - #0
FOSS is Working Against Itself
Posted: 2022-01-27 (UTC+00:00)
Updated: 2023-10-31 (UTC+00:00)
-
+
The world has become a dangerous, privacy invading, human rights stripping,
totalitarian place; in order to combat this, people are joining a growing, and
dangerous, trend, which I will refer to in this post as the "Free and Open
diff --git a/blog/systemd_insecurity.html b/blog/systemd_insecurity.xhtml
similarity index 77%
rename from blog/systemd_insecurity.html
rename to blog/systemd_insecurity.xhtml
index 0af1b1e..57544fd 100644
--- a/blog/systemd_insecurity.html
+++ b/blog/systemd_insecurity.xhtml
@@ -1,13 +1,13 @@
-
+
-
+
@@ -16,23 +16,23 @@
Blog - #1
systemd Insecurity
Posted: 2022-01-29 (UTC+00:00)
Updated: 2023-10-31 (UTC+00:00)
- "Yes, as you found out "0day" is not a valid username. I wonder
+ "Yes, as you found out "0day" is not a valid username. I wonder
which tool permitted you to create it in the first place. Note that not
permitting numeric first characters is done on purpose: to avoid ambiguities
- between numeric UID and textual user names.
-
- systemd will validate all configuration data you drop at it, making it hard to
+ between numeric UID and textual user names.
+ systemd will validate all configuration data you drop at it, making it hard to
generate invalid configuration. Hence, yes, it's a feature that we don't permit
invalid user names, and I'd consider it a limitation of xinetd that it doesn't
- refuse an invalid username.
-
- So, yeah, I don't think there's anything to fix in systemd here. I understand
- this is annoying, but still: the username is clearly not valid."
+ refuse an invalid username.
+ So, yeah, I don't think there's anything to fix in systemd here. I understand
+ this is annoying, but still: the username is clearly not valid."
- Lennart Poettering, systemd lead developer
My thoughts: systemd was the thing that allowed root access just because a
username started with a number, then Poettering blamed the user.
diff --git a/blog/the_chromium_monopoly.html b/blog/the_chromium_monopoly.xhtml
similarity index 87%
rename from blog/the_chromium_monopoly.html
rename to blog/the_chromium_monopoly.xhtml
index 3359605..9481f92 100644
--- a/blog/the_chromium_monopoly.html
+++ b/blog/the_chromium_monopoly.xhtml
@@ -1,13 +1,13 @@
-
+
-
+
@@ -16,23 +16,23 @@
Blog - #3
The Chromium Monopoly
Posted: 2022-12-20 (UTC+00:00)
Updated: 2023-11-11 (UTC+00:00)
-
+
-
+
@@ -16,16 +16,16 @@
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
Directory
@@ -54,7 +54,7 @@
Topic: Any, excluding
NSFW.
Multimedia prohibited unless
- part of discussion.
+ part of discussion.
No
@@ -67,7 +67,7 @@
Inferencium moderation channel.
Topic: Moderation of all XMPP
channels hosted by Inferencium.
- Inferencium moderators only.
+ Inferencium moderators only.
|
No
@@ -81,7 +81,7 @@
Topic: Any, excluding
NSFW.
Discussion prohibited outside of
- multimedia discussion.
+ multimedia discussion.
|
No
diff --git a/documentation.html b/documentation.html
deleted file mode 100644
index 6545194..0000000
--- a/documentation.html
+++ /dev/null
@@ -1,42 +0,0 @@
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- Inferencium - Documentation
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- Documentation
-
-
-
-
-
-
diff --git a/documentation.xhtml b/documentation.xhtml
new file mode 100644
index 0000000..7e2c001
--- /dev/null
+++ b/documentation.xhtml
@@ -0,0 +1,42 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Inferencium - Documentation
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Documentation
+
+
+
+
+
+
diff --git a/documentation/hardened_malloc.html b/documentation/hardened_malloc.xhtml
similarity index 81%
rename from documentation/hardened_malloc.html
rename to documentation/hardened_malloc.xhtml
index ba49914..4661925 100644
--- a/documentation/hardened_malloc.html
+++ b/documentation/hardened_malloc.xhtml
@@ -1,13 +1,13 @@
-
+
-
+
@@ -16,16 +16,16 @@
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
-
+
- Increase Permitted Amount of Memory Pages
- Clone hardened_malloc Source Code
@@ -69,13 +69,13 @@
- $ make <arguments>
+ $ make <arguments>
CONFIG_N_ARENA=n can be adjusted to increase parallel
performance at the expense of memory usage, or decrease memory usage at the expense of
parallel performance, where n is an integer. Higher values prefer parallel
performance, lower values prefer lower memory usage. The number of arenas has no impact
- on the security properties of hardened_malloc.
- Minimum number of arenas: 1
+ on the security properties of hardened_malloc.
+ Minimum number of arenas: 1
Maximum number of arenas: 256
For extra security, CONFIG_SEAL_METADATA=true can be used in order to
control whether Memory Protection Keys are used to disable access to all writable
@@ -98,8 +98,8 @@
musl-based systems: Add
export LD_PRELOAD="<hardened_malloc path>" to
- /etc/environment
- glibc-based systems: Add <hardened_malloc path> to
+ /etc/environment
+ glibc-based systems: Add <hardened_malloc path> to
/etc/ld.so.preload
diff --git a/documentation/openssl_selfsigned_certificate_chain.html b/documentation/openssl_selfsigned_certificate_chain.xhtml
similarity index 88%
rename from documentation/openssl_selfsigned_certificate_chain.html
rename to documentation/openssl_selfsigned_certificate_chain.xhtml
index e2428c9..aa4ab33 100644
--- a/documentation/openssl_selfsigned_certificate_chain.html
+++ b/documentation/openssl_selfsigned_certificate_chain.xhtml
@@ -1,13 +1,13 @@
-
+
-
+
@@ -16,16 +16,16 @@
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
-
+
- Create Certificate Authority Key
- Verify Certificate Authority Key
@@ -75,7 +75,7 @@
- openssl req -new -sha256 -subj "/C=<country>/ST=<state/province>/L=<locality>/O=<organization>/CN=<common name>" -addext "subjectAltName = DNS.1:<alternative DNS entry>" -key <server key name>.pem -out <server certificate signing request name>.pem
+ openssl req -new -sha256 -subj "/C=<country>/ST=<state/province>/L=<locality>/O=<organization>/CN=<common name>" -addext "subjectAltName = DNS.1:<alternative DNS entry>" -key <server key name>.pem -out <server certificate signing request name>.pem
diff --git a/index.html b/index.html
deleted file mode 100644
index b8bacf4..0000000
--- a/index.html
+++ /dev/null
@@ -1,31 +0,0 @@
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- Inferencium
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
diff --git a/index.xhtml b/index.xhtml
new file mode 100644
index 0000000..cb2e47f
--- /dev/null
+++ b/index.xhtml
@@ -0,0 +1,31 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Inferencium
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/key.html b/key.xhtml
similarity index 82%
rename from key.html
rename to key.xhtml
index d517455..074f322 100644
--- a/key.html
+++ b/key.xhtml
@@ -1,13 +1,13 @@
-
+
-
+
@@ -16,20 +16,20 @@
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
Key
-
+
diff --git a/music.html b/music.xhtml
similarity index 74%
rename from music.html
rename to music.xhtml
index 0d5aff6..938f95d 100644
--- a/music.html
+++ b/music.xhtml
@@ -1,13 +1,13 @@
-
+
-
+
@@ -16,16 +16,16 @@
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
Music
|