mirror of
https://github.com/JGoyd/JGoyd.git
synced 2026-06-25 11:29:56 +02:00
273 lines
11 KiB
HTML
273 lines
11 KiB
HTML
<!doctype html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
<title>Canonical Activity Record - Joseph Goydish</title>
|
|
<style>
|
|
:root {
|
|
color-scheme: dark;
|
|
--bg: #090c0f;
|
|
--panel: #10161b;
|
|
--panel-2: #0d1216;
|
|
--ink: #e7ece8;
|
|
--muted: #9aa7a0;
|
|
--line: #2a343a;
|
|
--green: #5aa36a;
|
|
--blue: #6aa6d8;
|
|
--amber: #c79a45;
|
|
--mono: #172027;
|
|
}
|
|
* { box-sizing: border-box; }
|
|
body {
|
|
margin: 0;
|
|
background:
|
|
linear-gradient(90deg, rgba(231,236,232,.035) 1px, transparent 1px),
|
|
linear-gradient(0deg, rgba(231,236,232,.025) 1px, transparent 1px),
|
|
radial-gradient(circle at 15% 0%, rgba(106,166,216,.10), transparent 28%),
|
|
var(--bg);
|
|
background-size: 30px 30px, 30px 30px, auto, auto;
|
|
color: var(--ink);
|
|
font-family: "Aptos", "Segoe UI", system-ui, sans-serif;
|
|
line-height: 1.5;
|
|
}
|
|
a { color: var(--blue); }
|
|
.wrap {
|
|
max-width: 1140px;
|
|
margin: 0 auto;
|
|
padding: 30px 20px;
|
|
}
|
|
header {
|
|
border-bottom: 1px solid var(--line);
|
|
background: rgba(9,12,15,.92);
|
|
}
|
|
.eyebrow {
|
|
margin: 0 0 10px;
|
|
color: var(--blue);
|
|
font-size: .76rem;
|
|
font-weight: 850;
|
|
letter-spacing: .11em;
|
|
text-transform: uppercase;
|
|
}
|
|
h1 {
|
|
max-width: 940px;
|
|
margin: 0;
|
|
font-size: clamp(2.1rem, 5vw, 4.45rem);
|
|
line-height: 1;
|
|
letter-spacing: 0;
|
|
}
|
|
h2 {
|
|
margin: 0 0 14px;
|
|
font-size: 1.12rem;
|
|
letter-spacing: 0;
|
|
}
|
|
h3 {
|
|
margin: 0 0 8px;
|
|
font-size: 1rem;
|
|
}
|
|
p { margin: 0 0 14px; }
|
|
.lede {
|
|
max-width: 840px;
|
|
margin-top: 16px;
|
|
color: var(--muted);
|
|
font-size: 1rem;
|
|
}
|
|
.actions, .chips {
|
|
display: flex;
|
|
flex-wrap: wrap;
|
|
gap: 8px;
|
|
}
|
|
.actions { margin-top: 20px; }
|
|
.button {
|
|
display: inline-flex;
|
|
align-items: center;
|
|
min-height: 40px;
|
|
padding: 9px 13px;
|
|
border: 1px solid var(--line);
|
|
border-radius: 0;
|
|
background: var(--panel);
|
|
color: var(--ink);
|
|
text-decoration: none;
|
|
font-weight: 760;
|
|
}
|
|
.button.primary {
|
|
border-color: var(--green);
|
|
background: #14301f;
|
|
color: #eaffef;
|
|
}
|
|
main .wrap {
|
|
display: grid;
|
|
gap: 18px;
|
|
}
|
|
section, .card, .stat {
|
|
border: 1px solid var(--line);
|
|
border-radius: 0;
|
|
background: rgba(16,22,27,.94);
|
|
}
|
|
section { padding: 20px; }
|
|
.stat-grid, .card-grid {
|
|
display: grid;
|
|
gap: 12px;
|
|
grid-template-columns: repeat(auto-fit, minmax(235px, 1fr));
|
|
}
|
|
.stat, .card { padding: 14px; }
|
|
.label {
|
|
display: block;
|
|
margin-bottom: 5px;
|
|
color: var(--muted);
|
|
font-size: .72rem;
|
|
font-weight: 850;
|
|
letter-spacing: .08em;
|
|
text-transform: uppercase;
|
|
}
|
|
.chip {
|
|
display: inline-flex;
|
|
width: fit-content;
|
|
border-radius: 0;
|
|
padding: 3px 7px;
|
|
color: #07100b;
|
|
font-size: .72rem;
|
|
font-weight: 850;
|
|
}
|
|
.public { background: var(--green); }
|
|
.record { background: var(--blue); }
|
|
.hash { background: var(--amber); }
|
|
table {
|
|
width: 100%;
|
|
border-collapse: collapse;
|
|
font-size: .91rem;
|
|
}
|
|
th, td {
|
|
border-bottom: 1px solid var(--line);
|
|
padding: 10px 8px;
|
|
text-align: left;
|
|
vertical-align: top;
|
|
}
|
|
th {
|
|
color: var(--muted);
|
|
font-size: .72rem;
|
|
letter-spacing: .06em;
|
|
text-transform: uppercase;
|
|
}
|
|
code {
|
|
border: 1px solid #243039;
|
|
border-radius: 0;
|
|
background: var(--mono);
|
|
color: #dfe8e2;
|
|
padding: 2px 5px;
|
|
font-family: "Cascadia Mono", Consolas, monospace;
|
|
word-break: break-word;
|
|
}
|
|
footer {
|
|
border-top: 1px solid var(--line);
|
|
color: var(--muted);
|
|
}
|
|
@media (max-width: 720px) {
|
|
table { font-size: .84rem; }
|
|
th, td { padding: 8px 6px; }
|
|
}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<header>
|
|
<div class="wrap">
|
|
<p class="eyebrow">Canonical Activity Record</p>
|
|
<h1>Proof-of-work ledger for public records, submissions, hashes, and anchor trails.</h1>
|
|
<p class="lede">This page is a front index for activity that can be checked: public records, certificate exhibits, submission receipts, DKIM/e-signed evidence, signed ledger entries, and fixed hashes. The full running record stays in the ledger repository.</p>
|
|
<div class="actions">
|
|
<a class="button primary" href="https://github.com/JGoyd/Running-Ledger">Open Running Ledger</a>
|
|
<a class="button" href="./anchors/">Anchor Index</a>
|
|
<a class="button" href="./canonical/identity-attestation.txt.asc">Identity Attestation</a>
|
|
</div>
|
|
<div class="stat-grid" style="margin-top: 22px;">
|
|
<div class="stat"><span class="label">Holder</span><strong>Joseph R. Goydish II</strong></div>
|
|
<div class="stat"><span class="label">Canonical role</span><strong>Activity index and verification surface</strong></div>
|
|
<div class="stat"><span class="label">OpenPGP</span><code>4A04 1F50 6D89 4F5E E391 7438 6487 8B56 A2EB 2D11</code></div>
|
|
</div>
|
|
</div>
|
|
</header>
|
|
|
|
<main>
|
|
<div class="wrap">
|
|
<section>
|
|
<h2>Primary Anchors</h2>
|
|
<div class="card-grid">
|
|
<article class="card">
|
|
<div class="chips"><span class="chip public">Certificate exhibit</span><span class="chip hash">Hash backed</span></div>
|
|
<h3>CNVD / CNCERT records</h3>
|
|
<p>Two CNVD/CNCERT certificate records name Joseph Goydish as contributor for Apple vulnerability records.</p>
|
|
<a href="./anchors/">Open anchor index</a>
|
|
</article>
|
|
<article class="card">
|
|
<div class="chips"><span class="chip public">NVD / CISA</span><span class="chip record">Public API</span></div>
|
|
<h3>Five Apple CVE rescore records</h3>
|
|
<p>Three CVSS 10.0 records and two CVSS 9.8 records tied to public vulnrichment filings and NVD scoring-history records.</p>
|
|
<a href="./anchors/cisa-nvd-vulnrichment-rescore/">Open rescore anchor</a>
|
|
</article>
|
|
<article class="card">
|
|
<div class="chips"><span class="chip record">Chronology</span></div>
|
|
<h3>CERT/CC VINCE trail</h3>
|
|
<p>Coordination chronology for VU#395558 and VRF#25-01-MPVDT / gen-41698 predates relevant Apple advisories.</p>
|
|
<a href="./anchors/certcc-vince-chronology/">Open chronology anchor</a>
|
|
</article>
|
|
</div>
|
|
</section>
|
|
|
|
<section>
|
|
<h2>NVD / CISA Rescore Records</h2>
|
|
<table>
|
|
<thead>
|
|
<tr><th>CVE</th><th>Score</th><th>Filing</th><th>Public proof</th></tr>
|
|
</thead>
|
|
<tbody>
|
|
<tr><td>CVE-2025-24085</td><td><strong>10.0 Critical</strong></td><td><code>vulnrichment#194</code></td><td><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-24085">NVD</a> / <a href="https://services.nvd.nist.gov/rest/json/cvehistory/2.0?cveId=CVE-2025-24085">history API</a> / <a href="https://github.com/JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201">GitHub reference</a></td></tr>
|
|
<tr><td>CVE-2025-24201</td><td><strong>10.0 Critical</strong></td><td><code>vulnrichment#194</code></td><td><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-24201">NVD</a> / <a href="https://services.nvd.nist.gov/rest/json/cvehistory/2.0?cveId=CVE-2025-24201">history API</a> / <a href="https://github.com/JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201">GitHub reference</a></td></tr>
|
|
<tr><td>CVE-2025-43300</td><td><strong>10.0 Critical</strong></td><td><code>vulnrichment#201</code></td><td><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-43300">NVD</a> / <a href="https://services.nvd.nist.gov/rest/json/cvehistory/2.0?cveId=CVE-2025-43300">history API</a></td></tr>
|
|
<tr><td>CVE-2025-31200</td><td><strong>9.8 Critical</strong></td><td><code>vulnrichment#200</code></td><td><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-31200">NVD</a> / <a href="https://services.nvd.nist.gov/rest/json/cvehistory/2.0?cveId=CVE-2025-31200">history API</a> / <a href="https://github.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201/blob/main/Remote%20Crypto%20Attack%20Chain%20.md">GitHub reference</a></td></tr>
|
|
<tr><td>CVE-2025-31201</td><td><strong>9.8 Critical</strong></td><td><code>vulnrichment#200</code></td><td><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-31201">NVD</a> / <a href="https://services.nvd.nist.gov/rest/json/cvehistory/2.0?cveId=CVE-2025-31201">history API</a> / <a href="https://github.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201/blob/main/Remote%20Crypto%20Attack%20Chain%20.md">GitHub reference</a></td></tr>
|
|
</tbody>
|
|
</table>
|
|
</section>
|
|
|
|
<section>
|
|
<h2>CNVD Certificate Exhibits</h2>
|
|
<p>Certificate exhibits are listed by record, certificate number, printed contributor, hash, and direct file link. The NVD/CISA rows above are the independently web-checkable vulnerability-record spine.</p>
|
|
<table>
|
|
<thead>
|
|
<tr><th>Record</th><th>Certificate</th><th>Printed contributor</th><th>SHA-256</th><th>File</th></tr>
|
|
</thead>
|
|
<tbody>
|
|
<tr>
|
|
<td>CNVD-2025-06744<br><small>Apple iOS / iPadOS buffer overflow</small></td>
|
|
<td><code>CNVD-YCGO-202503023656</code></td>
|
|
<td>Joseph Goydish</td>
|
|
<td><code>352A56FF1319E1B8138B1F4C6F55B652CF09CCD8C6784610E3A3EF6A9A80723C</code></td>
|
|
<td><a href="./evidence/TRACK-B-CNVD-2025-06744/evidence/CNVD-2025-06744-YCGO-202503023656-Certificate-2025-03-18.pdf">Open PDF</a></td>
|
|
</tr>
|
|
<tr>
|
|
<td>CNVD-2025-07885<br><small>Apple memory reuse</small></td>
|
|
<td><code>CNVD-YCGO-202504012519</code></td>
|
|
<td>Joseph Goydish</td>
|
|
<td><code>D5BB17D5A27EABD32D272173116C90F89F12CDD912A26969115007383A7F21C8</code></td>
|
|
<td><a href="./evidence/TRACK-B-CNVD-2025-07885/evidence/CNVD-2025-07885-YCGO-202504012519-Certificate-2025-04-22.pdf">Open PDF</a></td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</section>
|
|
|
|
<section>
|
|
<h2>Running Ledger</h2>
|
|
<p>The running ledger carries the broader investigative work: submissions, receipts, DKIM/e-signed evidence, references, SHA-256 packet hashes, and signed chronology.</p>
|
|
<a class="button primary" href="https://github.com/JGoyd/Running-Ledger">Open Running Ledger</a>
|
|
</section>
|
|
</div>
|
|
</main>
|
|
|
|
<footer>
|
|
<div class="wrap">
|
|
<p>Organized as a canonical record. No private keys, credentials, exploit code, or sensitive packet bodies are published here.</p>
|
|
</div>
|
|
</footer>
|
|
</body>
|
|
</html>
|