Gemini Web, OpenBSD, Server Mirrors, possibly in the future?

[serpentwalker666]

https://gemini.circumlunar.space/docs/

I found this awhile link awhile back and was wondering if eventually, we could eventually have some sort of project where dedicated members who are financially able to, along with having the time and experience, host joy of Satan and affiliated site mirrors. I'm not saying right now but, sometime in the future, in some sort of secure way, if this can be done SAFELY, depending on someone's country, and other factors, ect.

Also looking into OpenBSD, this may be a cyber security focused option some members could look into for this, if having multiple different web servers can eventually be done.

https://www.openbsd.org/

Another thing, for the storage of information, like copies of our sites, pdfs, an archive of Satan's Library and other information, we could look into a Home NAS, Network Attached Storage.

https://www.truenas.com/

TrueNAS may be good for this, but Linux Debian may be another option... well linux in general, but debian is usually less cutting edge and therefore more stable and reliable.

Hopefully I can get Hooded Cobras thoughts, and some other members thoughts on this.

I've been curious for awhile if we could do something like this, and if this is a good or risky endeavor, but I held back on posting as I wasn't quite sure, but I feel it's important to mention this now, especially with the post in regards to our ten year plan.

 

[Mastermind]

The problem with OpenBSD is that it's hard to cross compile from other platforms. The developers of OpenBSD do not want to share their development environment. They've made it so that OpenBSD is easy to compile only from within the same version of OpenBSD.
Why is this a problem?
Because it becomes quite easy to implement a "Trusting trust" attack. The compiler can easily detect that it's compiling itself and then embed some nasty code into the new binary, which will do the same to a new compiler. This infected compiler also embeds backdoors in any app you compile.
https://www.schneier.com/blog/archives/2006/01/countering_trus.html
The way to counter this attack is to use a much older compiler on another platform to compile all your binaries.
Cross compiling GNU/Linux is easy. OpenBSD is too hard for no valid reason and that's why I avoid it.

Debian is a bad choice as they use systemd. Much better would be to go with devuan. Even better gentoo and compile everything yourself. If you use binaries from other people, you may as well run Windows.
https://sysdfree.wordpress.com/

The most important thing right now would be for everyone to share their GPG keys so that people can be authenticated on another platform in a future point in time.
In case the sites are taken out, one would just need to create a website, paste their GPG key signature there and ask search engines to crawl it. After some time, members could search for the GPG signature using a search engine and find the new site.
https://emailselfdefense.fsf.org/en/

 

[serpentwalker666]

The problem with OpenBSD is that it's hard to cross compile from other platforms. The developers of OpenBSD do not want to share their development environment. They've made it so that OpenBSD is easy to compile only from within the same version of OpenBSD.
Why is this a problem?
Because it becomes quite easy to implement a "Trusting trust" attack. The compiler can easily detect that it's compiling itself and then embed some nasty code into the new binary, which will do the same to a new compiler. This infected compiler also embeds backdoors in any app you compile.
https://www.schneier.com/blog/archives/2006/01/countering_trus.html
The way to counter this attack is to use a much older compiler on another platform to compile all your binaries.
Cross compiling GNU/Linux is easy. OpenBSD is too hard for no valid reason and that's why I avoid it.

Debian is a bad choice as they use systemd. Much better would be to go with devuan. Even better gentoo and compile everything yourself. If you use binaries from other people, you may as well run Windows.
https://sysdfree.wordpress.com/

The most important thing right now would be for everyone to share their GPG keys so that people can be authenticated on another platform in a future point in time.
In case the sites are taken out, one would just need to create a website, paste their GPG key signature there and ask search engines to crawl it. After some time, members could search for the GPG signature using a search engine and find the new site.
https://emailselfdefense.fsf.org/en/

Highly appreciate the information. I was unaware OpenBSD is that vulnerable, and somewhat always, but not fully in regards to the issues with systemd.

The rest of the information was very valuable, and helpful as alot of it I was unfamiliar with. Thank you.