diff --git a/content/about/index.md b/content/about/index.md index e194916..4bea573 100644 --- a/content/about/index.md +++ b/content/about/index.md @@ -12,7 +12,7 @@ Other versions of this website This page also exists on the [tildeverse](https://tildeverse.org/), a bunch of \*nix computers that let people sign up for shell accounts. A typical shell account features clients for IRC and email, common terminal/commandline utilities, and (most importantly) web hosting. Read about the tildeverse's [origins](https://web.archive.org/web/20180917091804/https://medium.com/message/tilde-club-i-had-a-couple-drinks-and-woke-up-with-1-000-nerds-a8904f0a2ebf), read [the FAQ](https://tilde.club/wiki/faq.html), pick [a tilde](https://tilde.club/%7Epfhawkins/othertildes.html) and [get started](https://tilde.club/~anthonydpaul/primer.html). My Tildeverse pages will serve as a "rough draft". -Content on this site also appears on [my Gemini space](gemini://seirdy.one) +Content on this site also appears on my Gemini capsule Location (Rohan, meatspace) --------------------------- diff --git a/content/posts/floss-security.md b/content/posts/floss-security.md index fd846ed..ca6cd96 100644 --- a/content/posts/floss-security.md +++ b/content/posts/floss-security.md @@ -160,7 +160,7 @@ Good counter-arguments I readily concede to several points in favor of source availability from a security perspective: -- Source code can make analysis _easier_ by _supplementing_ source-independent approaches. The lines between the steps I mentioned in the [four-step vulnerability-fixing process](#understanding-program-behavior) are blurry. +- Source code can make analysis _easier_ by _supplementing_ source-independent approaches. The lines between the steps I mentioned in the [four-step vulnerability-fixing process](#how-security-fixes-work) are blurry. - Patching vulnerabilities is important. Source availability makes it possible for the community, package maintainers, or reporters of a vulnerability to patch software. Package maintainers often blur the line between "packager" and "contributor" by helping projects migrate away from abandoned/insecure dependencies. One example that comes to mind is the Python 2 to Python 3 transition for projects like Calibre.[^12] Being able to fix issues independent of upstream support is an important mitigation against [user domestication](./../../../2021/01/27/whatsapp-and-the-domestication-of-users.html). - Some developers/vendors don't distribute binaries that make use of modern toolchain-level exploit mitigations (e.g. PIE, RELRO, stack canaries, automatic variable initialization, [CFI](https://clang.llvm.org/docs/ControlFlowIntegrity.html), etc.[^13]). In these cases, building software yourself with these mitigations (or delegating it to a distro that enforces them) requires source code availability (or at least some sort of intermediate representation). - Closed-source software may or may not have builds available that include sanitizers and debug symbols. diff --git a/content/posts/search-engines-with-own-indexes.gmi b/content/posts/search-engines-with-own-indexes.gmi index 2cffe90..c309325 100644 --- a/content/posts/search-engines-with-own-indexes.gmi +++ b/content/posts/search-engines-with-own-indexes.gmi @@ -84,7 +84,7 @@ These engines pass most of the tests listed in the “methodology” section. * Right Dao: very fast, good results. Passes the tests fairly well. It plans on including query-based ads if/when its userbase grows.⁸ * Gigablast: It’s been around for a while and also sports a classic web directory. Searches are a bit slow, and it charges to submit sites for crawling. It powers Private.sh. Gigablast is tied with Right Dao for quality. -* Gowiki: Very young, small index, but shows promise. I discovered this in the seirdy.one access logs. Currently only available in the US. +* Gowiki: Very young, small index, but shows promise. I discovered this in the seirdy.one access logs. Currently only available in the US. Seems down as of early 2022. => https://rightdao.com Right Dao => https://gigablast.com/ Gigablast @@ -110,12 +110,13 @@ These engines fail badly at a few important tests. Otherwise, they seem to work * Infotiger: Allows choosing between multiple different sorting algorithms (date, text length, PageRank, and "AND"). Supports English and German. The legacy version allows submitting links via a web-form or email, but I don't know if that has an impact on the more recent alpha version. * search.tl: Generalist search for one TLD at a time (defaults to .com). I'm not sure why you'd want to always limit your searches to a single TLD, but now you can.⁹ There isn't any visible UI for changing the TLD for available results; you need to add/change the "tld" URL paramater. For example, to search .org sites, append "&tld=org" to the URL. It seems to be connected to Amidalla.de, but Amidalla doesn't seem to currently be operational. Amidalla allows users to manually add URLs to its index and directory; I have yet to see if doing so impacts search.tl results. * Kozmonavt: Has a small index of almost 5 million sites. If I want to find the website for a certain project, Kozmonavt works well (provided its index has crawled said website). It works poorly for learning things and finding general information. I cannot recommend it for anything serious since it lacks contact information, a privacy policy, or any other information about the org/people who made it. Discovered in the seirdy.one access logs. -* Burf.co: Very small index, but seems fine at ranking more relevant results higher. Allows site submission without any extra steps. Down as of late June 2021. +* Burf.co: Very small index, but seems fine at ranking more relevant results higher. Allows site submission without any extra steps. => https://meorca.com/ Meorca Search Engine => https://alpha.infotiger.com/ Infotiger => http://www.search.tl search.tl => https://kozmonavt.ml/ Kozmonavt +=> https://burf.co/ Burf.co * ChatNoir: An experimental engine by researchers that uses the Common Crawl index. The engine is open source. There's more information in its announcement on the Common Crawl mailing list (Google Groups). diff --git a/content/posts/search-engines-with-own-indexes.md b/content/posts/search-engines-with-own-indexes.md index e49e706..937e907 100644 --- a/content/posts/search-engines-with-own-indexes.md +++ b/content/posts/search-engines-with-own-indexes.md @@ -58,7 +58,7 @@ These are large engines that pass all the above tests and more. - Yahoo - DuckDuckGo[^3] - AOL - - Qwant (partial)[^4] + - Qwant (partial)[^4] - Ecosia - Ekoru - Privado @@ -89,7 +89,7 @@ These engines pass most of the tests listed in the "methodology" section. - [Right Dao](https://rightdao.com): very fast, good results. Passes the tests fairly well. It plans on including query-based ads if/when its user base grows.[^8] - [Gigablast](https://gigablast.com/): It's been around for a while and also sports a classic web directory. Searches are a bit slow, and it charges to submit sites for crawling. It powers [Private.sh](https://private.sh). Gigablast is tied with Right Dao for quality. -- [Gowiki](https://gowiki.com): Very young, small index, but shows promise. I discovered this in the seirdy.one access logs. Currently only available in the US. +- [Gowiki](https://gowiki.com): Very young, small index, but shows promise. I discovered this in the seirdy.one access logs. Currently only available in the US. Seems down as of early 2022. ### Smaller indexes, hit-and-miss @@ -103,7 +103,7 @@ These engines fail badly at a few important tests. Otherwise, they seem to work - [Infotiger](https://alpha.infotiger.com/): Allows choosing between multiple different sorting algorithms (date, text length, PageRank, and "AND"). Supports English and German. The legacy version allows submitting links via a web-form or email, but I don't know if that has an impact on the more recent alpha version. - [search.tl](http://www.search.tl/): Generalist search for one TLD at a time (defaults to .com). I'm not sure why you'd want to always limit your searches to a single TLD, but now you can.[^9] There isn't any visible UI for changing the TLD for available results; you need to add/change the `tld` URL parameter. For example, to search .org sites, append `&tld=org` to the URL. It seems to be connected to [Amidalla](http://www.amidalla.de/), but Amidalla doesn't seem to currently be operational. Amidalla allows users to manually add URLs to its index and directory; I have yet to see if doing so impacts search.tl results. - [Kozmonavt](https://kozmonavt.ml/): Has a small index of almost 5 million sites. If I want to find the website for a certain project, Kozmonavt works well (provided its index has crawled said website). It works poorly for learning things and finding general information. I cannot recommend it for anything serious since it lacks contact information, a privacy policy, or any other information about the org/people who made it. Discovered in the seirdy.one access logs. -- Burf.co: Very small index, but seems fine at ranking more relevant results higher. Allows site submission without any extra steps. Down as of late June 2021. +- [Burf.co](https://burf.co/): Very small index, but seems fine at ranking more relevant results higher. Allows site submission without any extra steps. - [ChatNoir](https://www.chatnoir.eu/): An experimental engine by researchers that uses the [Common Crawl](https://commoncrawl.org/) index. The engine is [open source](https://github.com/chatnoir-eu). See the [announcement](https://groups.google.com/g/common-crawl/c/3o2dOHpeRxo/m/H2Osqz9dAAAJ) on the Common Crawl mailing list (Google Groups). ### Unusable engines, irrelevant results @@ -189,7 +189,7 @@ Some of this content came from the [Search Engine Map](https://www.searchenginem Matt from Gigablast also gave me some helpful information on GBY which I included in the "Rationale" section. He's written more about big tech in the [Gigablast blog](https://gigablast.com/blog.html). -Nicholas A. Ferrell of [The New Leaf Journal](https://thenewleafjournal.com/) wrote a [great post](https://thenewleafjournal.com/a-2021-list-of-alternative-search-engines-and-search-resources/) on alternative search engines. He also gave me some [useful details](https://lists.sr.ht/~seirdy/seirdy.one-comments/%3C20210618031450.rb2twu4ypek6vvl3%40rkumarlappie.attlocal.net%3E) about Seznam, Naver, Baidu, and Goo. +Nicholas A. Ferrell of [The New Leaf Journal](https://thenewleafjournal.com/) wrote a [great post](https://thenewleafjournal.com/a-2021-list-of-alternative-search-engines-and-search-resources/) on alternative search engines. He also gave me some [useful details](https://lists.sr.ht/~seirdy/seirdy.one-comments/%3C20210618031450.rb2twu4ypek6vvl3%40rkumarlappie.attlocal.net%3E) about Seznam, Naver, Baidu, and Goo. [^1]: Yes, "indexes" is an acceptable plural form of the word "index". The word "indices" sounds weird to me outside a math class. diff --git a/content/posts/website-best-practices.gmi b/content/posts/website-best-practices.gmi index b1b329d..d8fa30e 100644 --- a/content/posts/website-best-practices.gmi +++ b/content/posts/website-best-practices.gmi @@ -228,7 +228,7 @@ Exceptions exist: one or two very simple responsive changes won't hurt. For exam Nontrivial use of width-selectors, in CSS or "" tags, is actually a powerful vector for JS-free fingerprinting: -=> https://matt.traudt.xyz/posts/how-css-alone-can-help-track-you-YF4ciVY6/ How CSS alone can help track you +=> https://matt.traudt.xyz/posts/2016-09-04-how-css-alone-can-help-track-you/ How CSS alone can help track you ### What about sidebars? diff --git a/content/posts/website-best-practices.md b/content/posts/website-best-practices.md index dabd43c..54df968 100644 --- a/content/posts/website-best-practices.md +++ b/content/posts/website-best-practices.md @@ -203,7 +203,7 @@ Exceptions exist: one or two very simple responsive changes won't hurt. For exam } ``` -Nontrivial use of width-selectors, in CSS or `` tags, is actually a powerful vector for [JS-free fingerprinting](https://matt.traudt.xyz/posts/how-css-alone-can-help-track-you-YF4ciVY6/). +Nontrivial use of width-selectors, in CSS or `` tags, is actually a powerful vector for [JS-free fingerprinting](https://matt.traudt.xyz/posts/2016-09-04-how-css-alone-can-help-track-you/). ### What about sidebars? diff --git a/content/posts/whatsapp-and-the-domestication-of-users.gmi b/content/posts/whatsapp-and-the-domestication-of-users.gmi index fe5c912..c979916 100644 --- a/content/posts/whatsapp-and-the-domestication-of-users.gmi +++ b/content/posts/whatsapp-and-the-domestication-of-users.gmi @@ -201,7 +201,7 @@ The Framalang translators at Framasoft translated this article to French: Licaon_Kter translated this article to Romanian: -=> https://convorb.im/post/2021/02/14/whatsapp-si-domesticirea-utilizatorilor.html WhatsApp și domesticirea utilizatorilor +=> https://web.archive.org/web/20210924154306/convorb.im/post/2021/02/14/whatsapp-si-domesticirea-utilizatorilor.html WhatsApp și domesticirea utilizatorilor David Jimenez translated this article to Spanish: diff --git a/content/posts/whatsapp-and-the-domestication-of-users.md b/content/posts/whatsapp-and-the-domestication-of-users.md index 08bbfc2..e036e61 100644 --- a/content/posts/whatsapp-and-the-domestication-of-users.md +++ b/content/posts/whatsapp-and-the-domestication-of-users.md @@ -173,7 +173,7 @@ Translations are always welcome. The Framalang translators at [Framasoft](https://framasoft.org/) translated this article to French: WhatsApp et la domestication des utilisateurs. -Licaon_Kter translated this article to Romanian: WhatsApp și domesticirea utilizatorilor. +Licaon_Kter translated this article to Romanian: WhatsApp și domesticirea utilizatorilor. David Jimenez translated this article to Spanish: WhatsApp y la domesticación de usuarios. @@ -186,5 +186,5 @@ The Framalang translators at [Framasoft](https://framasoft.org/) translated this [^3]: See [Defective by Design](https://www.defectivebydesign.org/). DRM is another classic example of user domestication. For the record, Mozilla opposed making DRM a Web standard. It implemented DRM support after it lost to the other W3C members. This doesn't excuse putting DRM in a browser, but at least there wasn't malicious intent. The same can't be said for the pro-DRM members of the W3C. -[^4]: Moxie's blog post generated many responses. Two good follow-ups are on [Linux Weekly News](https://lwn.net/Articles/687294/) and a [blog post](https://matrix.org/blog/2020/01/02/on-privacy-versus-freedom) by Matrix.org +[^4]: Moxie's blog post generated many responses. Two good follow-ups are on [Linux Weekly News](https://lwn.net/Articles/687294/) and a [blog post](https://matrix.org/blog/2020/01/02/on-privacy-versus-freedom/) by Matrix.org diff --git a/layouts/posts/single.html b/layouts/posts/single.html index 3d472fc..86db92d 100644 --- a/layouts/posts/single.html +++ b/layouts/posts/single.html @@ -31,7 +31,7 @@