diff --git a/about.html b/about.html
index d01e6c3..9b4a4f7 100644
--- a/about.html
+++ b/about.html
@@ -42,7 +42,8 @@
| Type |
Software |
Description |
- Source model (License) |
+ Source model
+ (License) |
| Operating system |
@@ -53,18 +54,41 @@
which allows vast customisation to tailor the operating system to suit your specific
needs. There are many advantages to such an operating system, with the most notable
being the ability to optimise the software for security, privacy, performance,
- power usage; however, there are effectively unlimited other use cases, or a
+ or power usage; however, there are effectively unlimited other use cases, or a
combination of multiple use cases.
I have focused on security hardening and privacy hardening, placing performance below
those aspects, although my system is still very performant. Some of the hardening I
apply includes stack protection, signed integer overflow wrapping, and GrapheneOS'
hardened_malloc memory allocator.
+
You can find my personal Gentoo Linux hardening configuration
here.
Open source
- (GPLv2) |
+ (GPLv2-only)
+
+ | Web browser |
+ 
+
+ Chromium |
+ Chromium is a highly secure web browser which is often ahead of other
+ web browsers in security aspects. It has a dedicated security team and a
+ very impressive
+ security brag sheet.
+ Chromium's security features include a strong
+ multi-layer sandbox,
+ strong site isolation,
+ Binding Integrity
+ memory hardening, and
+ control-flow integrity (CFI).
+
+ You can learn more about Chromium by visiting its
+ official website
+ which provides extensive documentation. |
+ Open source
+
+ (BSD 3-Clause) |
Smartphone
@@ -73,7 +97,9 @@
Type |
Software |
Description |
- Source model (License) |
+ Source model
+
+ (License) |
| Operating system |
@@ -90,14 +116,33 @@
against common memory corruption vulnerabilties, hardened Bionic standard C library,
and local and remote hardware-backed attestation (Auditor) to ensure the OS has
not been corrupted or tampered with. GrapheneOS only supports devices which receive
- full support from their manufacturers, including firmware updates and device-specific
- updates, long support lifecycles, secure hardware, and overall high security practices.
+ full support from their manufacturers, including firmware updates, long support
+ lifecycles, secure hardware, and overall high security practices.
+
For an extensive list of features GrapheneOS provides, visit its
- official website.
+ official website
+ which provides extensive documentation.
Open source
(MIT) |
+
+ | Web browser |
+ 
+
+ Vanadium |
+ Vanadium is a security-hardened, privacy-hardened Chromium-based web browser
+ which utilises GrapheneOS' operating system hardening to implement stronger
+ defenses to the already very secure Chromium web browser. Its hardening includes
+ disabling JavaScript just-in-time (JIT) compilation by default, stubbing out the
+ battery status API to prevent abuse of it, and always-on
+ Incognito mode as an option.
+
+ Vanadium's source code repository, including its Chromium patchset, can be found
+ here. |
+ Open source
+
+ (GPLv2-only) |
diff --git a/img/logo-chromium.png b/img/logo-chromium.png
new file mode 100644
index 0000000..90ae1da
Binary files /dev/null and b/img/logo-chromium.png differ
diff --git a/img/logo-vanadium.png b/img/logo-vanadium.png
new file mode 100644
index 0000000..82e74fc
Binary files /dev/null and b/img/logo-vanadium.png differ
diff --git a/source.html b/source.html
index 0a8aae9..6b20890 100644
--- a/source.html
+++ b/source.html
@@ -26,6 +26,7 @@
- Configuration files
- Script files
+
Inferencium Network Source Code Repositories
These repositories contain source code targeted towards a public release and
are suitable for a wide range of systems.