refresh security.txt

inb4 a bunch of people from the privsec community @ me for using flatpak
chromium:

Yes, the sandboxing is different, but I'm not using this as my
day-to-day browser. I'm using it headless for measurements and auditing.
I want a browser that behaves as close to upstream official Chromium
builds when doing Chromium measurements.

Take some deep breaths. Here, have a glass of water.

Makefile

@@ -52,7 +52,7 @@ lint-css: $(CSS_DIR)/*.css
 equal-access:
 	cp -r $(OUTPUT_DIR) $(OUTPUT_DIR).eac
 	find $(OUTPUT_DIR).eac -type f -name "*.html" | xargs -n1 sd 'content-visibility:auto;' ''
-	achecker $(OUTPUT_DIR).eac/
+	pnpm --package accessibility-checker dlx achecker $(OUTPUT_DIR).eac/
 	rm -rf $(OUTPUT_DIR).eac
 
 .PHONY: validate-json

Makefile.online

@@ -7,18 +7,18 @@ SCHEME=https://
 URL ?= $(SCHEME)$(DOMAIN)$(PAGE_PATH)
 # latest bleeding-edge chromium snapshot
 CHROME_DIR = /home/rkumar/Downloads/gitclone/chromium/thorium/latest
-CHROME_PATH = $(CHROME_DIR)/thorium
+CHROME_PATH = org.chrome.Chromium
-CHROMEDRIVER_PATH = $(CHROME_DIR)/chromedriver
+CHROMEDRIVER_PATH = chromedriver
 CHROME_PROFILE ?= /tmp/chrome-lighthouse
 JS_FLAGS=''
 # We enable experimental web platform features so the Document-Policy header is enforced
 # # 
-CHROME_FLAGS += --headless --disable-extensions --no-default-browser-check --disable-client-side-phishing-detection --disable-component-update --disable-default-apps --disable-device-discovery-notifications --disable-domain-reliability --disable-background-timer-throttling --disable-breakpad --enable-blink-features=LayoutInstabilityAPI --enable-features=UseDnsHttpsSvcb,UseDnsHttpsSvcbAlpn --no-first-run --disable-background-networking --user-data-dir=$(CHROME_PROFILE) --enable-experimental-web-platform-features --enable-quic --origin-to-force-quic-on=seirdy.one:443
+CHROME_FLAGS += --headless --disable-network-portal-notification --disable-client-side-phishing-protection --disable-gaia-services --disable-sync --no-vr-runtime --no-wifi --no-crash-upload --no-report-uload --disable-extensions --allow-browser-signin=false --no-default-browser-check --disable-client-side-phishing-detection --disable-component-update --disable-default-apps --disable-device-discovery-notifications --disable-domain-reliability --disable-fonts-googleapis-references --disable-field-trial-config --lang=en-US --disable-ntp-popular-sites --disable-offer-store-unmasked-wallet-cards --disable-office-editing-component-extension --disable-fine-grained-time-zone-detection --disable-background-timer-throttling --disable-breakpad --enable-blink-features=LayoutInstabilityAPI --enable-features=UseDnsHttpsSvcb,UseDnsHttpsSvcbAlpn,AsyncDns --no-first-run --disable-background-networking --user-data-dir=$(CHROME_PROFILE) --enable-experimental-web-platform-features --enable-quic --origin-to-force-quic-on=seirdy.one:443
 CHROME_FLAGS_COMMA = 'disable-extensions,no-default-browser-check,disable-client-side-phishing-detection,disable-component-update,disable-default-apps,disable-device-discovery-notifications,disable-domain-reliability,disable-background-timer-throttling,disable-breakpad,no-first-run,disable-background-networking,js-flags=--jitless'
-# When quiet, my lappie's CPU power is benchmarked to be ~1320. The CPU throttling calculator recommends throttling by 3.1x.
+# When quiet, my lappie's CPU power is benchmarked to be a bit under 1000. The CPU throttling calculator recommends throttling by 2.3.
-# Multiply that by 4 cuz imo it's way too generous. It targets devices like the Moto G4; I target devices like the JioPhone 2.
+# Multiply that by 3 cuz imo it's way too generous. It targets devices like the Moto G4; I target devices like the JioPhone 2.
-CPU_SLOWDOWN=12.5
+CPU_SLOWDOWN=6.9 # nice
-LIGHTHOUSE_ARGS += --budget-path linter-configs/budget.json --output html --output json --output-file lighthouse-results --throttling-method=devtools --throttling.cpuSlowdownMultiplier=$(CPU_SLOWDOWN) --chrome-flags="$(CHROME_FLAGS)"
+LIGHTHOUSE_ARGS += --budget-path linter-configs/budget.json --output html --output json --output-file lighthouse-results --throttling-method=devtools --throttling.cpuSlowdownMultiplier=$(CPU_SLOWDOWN) --chrome-flags="$(CHROME_FLAGS)" --view
 
 # make some of these quiet bc they'll otherwise echo every URL
 

assets/css/main.css

@@ -501,13 +501,19 @@ ins,
  * figure captions shouldn't look like regular paragraphs; there should
  * be some extra space.
  * This does not hold true for figures in somewhat distinct sections; the
- * section should instead get the spacing. A section that constitutes a
+ * parent section should instead get the spacing. A section that
- * separate schema.org object would qualify. */
+ * constitutes a separate schema.org object would qualify. */
 figure,
 section[itemprop="mentions"] {
 	margin: 1.5em 0;
 }
 
+/* image captions, on the other hand, should look more separate from
+ * surrounding paragraphs. */
+figure[itemtype="https://schema.org/ImageObject"] {
+	margin: 1.5em;
+}
+
 section[itemprop="mentions"] > figure {
 	margin: 0;
 }

content/about/_index.gmi

@@ -134,6 +134,7 @@ More information is available in my "uses" page.
 
 I watch anime. Some of my favorites, in no particular order:
 
+* Pluto
 * Code Geass
 * Mawaru Penguindrum
 * No Game No Life: Zero

content/about/_index.md

@@ -161,6 +161,7 @@ More information is available in [my "uses" page]({{<relref "uses">}}).
 
 I watch <span class="p-category category">anime</span>. Some of my favorites, in no particular order:
 
+- Pluto
 - Code Geass
 - Mawaru Penguindrum
 - No Game No Life: Zero

layouts/partials/footer.html

@@ -15,7 +15,7 @@
 				<a rel="alternate" href="http://wgq3bd2kqoybhstp77i3wrzbfnsyd27wt34psaja4grqiezqircorkyd.onion{{ .RelPermalink }}">Tor mirror</a>
 			</li>
 			<li>
-				<a href="{{ site.BaseURL }}meta/privacy/">Privacy</a>
+				<a href="{{ site.BaseURL }}meta/privacy/" rel="privacy-policy">Privacy</a>
 			</li>
 			<li>
 				<a href="{{ site.BaseURL }}meta/site-design/">Site design standards</a>

layouts/shortcodes/codecaption.html

@@ -12,6 +12,6 @@
 	<span id="{{ $id }}" tabindex="-1">
 	<strong itemprop="name"> <span itemprop="codeSampleType">Code snippet</span> {{ $codeIndex }}</strong>{{with .Get "lang"}} (<span itemprop="programmingLanguage">{{ . }}</span>){{ end -}}
 	</span>:
-{{ .Inner | markdownify | safeHTML }}
+{{ .Inner | .Page.RenderString | safeHTML }}
 </figcaption>
 {{- .Page.Scratch.Set "codeIndex" (add 1 $codeIndex) -}}

scripts/bin/axe-ff

@@ -5,4 +5,4 @@ PATH="scripts/bin:$PATH"
 output_dir="$1"
 shift
 urls="$(echo "$*" | tr ' ' '\n' | sd '^https?://[^/]*' "file://$PWD/$output_dir" | sd '/$' '/index.html' | tr '\n' ' ')"
-axe $urls -b firefox --show-errors
+pnpm --package @axe-core/cli -s dlx axe $urls -b firefox --show-errors

static/.well-known/security.txt

@@ -2,23 +2,23 @@
 Hash: SHA256
 
 Contact: https://seirdy.one/about/
-Expires: 2023-09-25T07:00:00.000Z
+Expires: 2024-11-12T00:00:00.000Z
 Encryption: https://seirdy.one/publickey.asc
 Preferred-Languages: en
 Canonical: https://seirdy.one/.well-known/security.txt
 -----BEGIN PGP SIGNATURE-----
 
-iQIzBAEBCAAdFiEErGrx+DjfPcwuR6bPHoktsqX4RHkFAmMwvJwACgkQHoktsqX4
+iQIzBAEBCAAdFiEErGrx+DjfPcwuR6bPHoktsqX4RHkFAmVOiVIACgkQHoktsqX4
-RHmRMg/9Gf3CuEBytq9F7lDweb0KYTewJ+2wauovxUcoC49wp+4fGbxT5lghZtpN
+RHlQbg//c3VPPxEF7i7rsnDur4jyF1qzEjsj+/fdtS70ayRr20aqn2dC+ye7/qzh
-6+sSNIrK7dgVmULqS7gD6I/2Zh/R3qwJHsvfiKaaKarV12k36FQm4yg/Pib8NI0k
+60jRe7kVUXxk5E1Lfc3sEZ3IEeCBDlzr2fEzRR6uUG+gWRwnW8qJAOJ6S+MbjDBI
-jb53eRKGPw2KC0RUnV+vz57sbvzMQpw6FN03QAISOes0QFhpao466+rE7kroVPJo
+V8+PishDOfBt6U/4Jasq/Kx83AexZNyRY6joNphkvhz/31xCoxC8RLjKOBbzx+KR
-uXleLlbfPZsLM7GYsR16X4gLqJr/i6aeDCIyEX8nuy/8EeMWJrfMoAmNC5UM8aPY
+rzhcXmW8jmRk8l1pOivkdnZgdTEY/gUpkp/v5hmgSZ0/aDA2YSSB7jlKf6a2RRuo
-h/N6/s5pdsdi/VH+ezN4hp5DZOyx0oREPueFveU11CHpuNBsx5Sp1lweVOlhNjUW
+2xSgeguxAz7F1SvjTpydFSQR8W6dxkYuMHlZHov6qltPAgax8d/Bn0XT/CvZTkdn
-LZV490ZX5P1+WArUuORGJWTSbCH3LKPdQd4Mf+LpDPDSarpozdjG1SkmPSAisu2Y
+kXLdIKj53gD2L32C1K9Mwncw4qIvwCymCjHgmanSZPDW34p7f0yMFeTJT8P3H9Nk
-iEBg3AT3D6DB0CgYrTA/NnyrvfKwbI4Yo4s73Rvdi3CqDqjQiJYDns+WyS3sxHau
+a76GB05uQXdo8svCzkngqT223LeiKd7CpIgdwpLuCsK5QABTSBEkLl7NyoGeX4vn
-wJlt6TpqUsGPBlr8c4diX0YryQP9h1dirfLe2Dg/Ju+pL9JtpFStYQSnu9TYJkgd
+mpAd5iFUlkQniD/RJhrTdfCdGh6TBJyAwj3agPYhoPRYwnC9SDZ99r1WJ+yU3aAp
-UMk3lJx0i+iXuO1rpf8RgMPAiRdHhKvwTQLER6M5UXYn+mOTvUK+7RwS6UaW8dmF
+YYO5sN1kyxB2nplRWzPfXzmsnuPphnSqz3dtfnzRt7jsGbshxUps6hbxtweYp2LV
-/ja8lezJaikV3Bo7ChVx+G7oTOuGApQqWV2CGgq7Hzn6sgZp+jkQyFyDuHIb+Wdr
+JrYqvmPHUZRsGf79YbgmhxHMS5tDJflaJq7x2E5OWaUmrn2h3oU9qYJoVyDzTgWB
-Wqt2KmMUk1W2Oj/zAyD4o+NECCEaKdj35iyfdWUylsoteod7vsM=
+fRpxXJ/VFiKg3OjON0cFjALqTWBSG0j+hXpac52UCZrfuW0RHZc=
-=zTHI
+=/Zhb
 -----END PGP SIGNATURE-----