20 files changed, 380 insertions, 193 deletions
diff --git a/www/Makefile b/www/Makefile
new file mode 100644
index 00000000..10eb66fc
--- /dev/null
+++ b/www/Makefile
@@ -0,0 +1,45 @@
+# Copyright (C) 2017 Michael Reed <michael@michaelreed.io>
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+MD_MAIN != find -L . -name '*.md' -and ! -path '*/news/*'
+HTML_MAIN = $(MD_MAIN:.md=.html)
+
+MD_NEWS != cat news/MANIFEST
+HTML_NEWS = $(MD_NEWS:.md=.html)
+HTML_BARE_NEWS = $(MD_NEWS:.md=.bare.html)
+
+
+# news/index.html implies the building of $(HTML_BARE_NEWS).
+all: $(HTML_MAIN) $(HTML_NEWS) news/index.html
+
+.SUFFIXES: .md .html .bare.html
+.md.html:
+	./publish.sh $<
+
+.md.bare.html:
+	pandoc $(<) > $(<:.md=.bare.html)
+
+# Unlike all the other markdown files, news/index.md does not exist at first:
+# it must be generated by index.sh. Also note that index.sh generates the RSS
+# feed, which requires the bare HTML versions of all news items.
+news/index.md: $(HTML_BARE_NEWS)
+	./index.sh
+
+clean:
+	rm -f	$(HTML_MAIN) $(HTML_NEWS) $(HTML_BARE_NEWS) \
+		news/index.md news/index.html news/index.bare.html \
+		feed.xml news/feed.xml
+
+.PHONY: clean
diff --git a/www/amd-libre.md b/www/amd-libre.md
index 317e969b..9f88c5ff 100644
--- a/www/amd-libre.md
+++ b/www/amd-libre.md
@@ -1,3 +1,5 @@
+[Update](https://yro.slashdot.org/story/17/07/19/1459244/amd-has-no-plans-to-release-psp-code): unfortunatly AMD has no plans to release the source code and instead trusts third-party "hackers" to audit the "feature", too much pressure from govererment agencies? who knows?
+
 ---
 title: We call on AMD to release source code and specs for Ryzen platform
 ...
diff --git a/www/conduct.md b/www/conduct.md
index aa8bea1e..313321c0 100644
--- a/www/conduct.md
+++ b/www/conduct.md
@@ -82,14 +82,13 @@ Instances of abusive, harassing, or otherwise unacceptable behavior may be
 reported by contacting one of the moderators privately via IRC private message
 (see list below):
 
-* Alyssa Rosenzweig: **alyssa** on Freenode
-* Andrew Robbins: **and\_who** on Freenode
+* Andrew Robbins: **and\_who** on Freenode, email <mailto:andrew@libreboot.org>
 * Jason Self: **jxself** on Freenode
-* Leah Rowe: **\_4of7** on Freenode
+* Leah Rowe: **\_4of7** on Freenode, email <mailto:leah@libreboot.org>
 * Paul Kocialkowski: **paulk-X** Freenode (X is variable, for this
-  person.
+  person, email <mailto:paul@libreboot.org>
   check in the channel)
-* Swift Geek: **swiftgeek** on Freenode
+* Swift Geek: **swiftgeek** on Freenode, email <mailto:swiftgeek@libreboot.org>
 
 If the complaint is for abuses on the Libreboot subreddit at
 [r/libreboot](https://www.reddit.com/r/libreboot/) then there are a separate
diff --git a/www/download.md b/www/download.md
index 8e329a35..c269d985 100644
--- a/www/download.md
+++ b/www/download.md
@@ -29,15 +29,13 @@ Do you have a mirror?
 ---------------------
 
 Let us know! We will add it here. Instructions for how to mirror
-libreboot releases can be found [here](rsync.md).
+libreboot releases can be found [on the mirrors](#https).
 
 HTTPS mirrors {#https}
 -------------
 
 These mirrors are recommended, since they use TLS (https://) encryption.
 
-<https://libreboot.org/release/> (Libreboot project official mirror)
-
 <https://www.mirrorservice.org/sites/libreboot.org/release/> (University
 of Kent, UK)
 
@@ -51,6 +49,27 @@ Project, USA)
 
 <https://elgrande74.net/libreboot/> (elgrande74.net, France)
 
+<https://nephelai.zanity.net/mirror/libreboot/> (zanity.net, New Zealand)
+
+RSYNC mirrors {#rsync}
+-------------
+
+Useful for mirroring Libreboot's entire set of release archives.
+
+<rsync://rsync.libreboot.org/mirrormirror/> (Libreboot project official mirror)
+
+<rsync://rsync.mirrorservice.org/libreboot.org/release/> (University of Kent,
+UK)
+
+<rsync://mirror.math.princeton.edu/pub/libreboot/> (Princeton university, USA)
+
+<rsync://ftp.linux.ro/libreboot/> (linux.ro, Romania)
+
+<rsync://libreboot.mirror.si/libreboot/>
+
+Are you running a mirror? Contact the libreboot project, and the link will be
+added to this page!
+
 HTTP mirrors {#http}
 ------------
 
@@ -89,4 +108,4 @@ Libreboot includes statically linked executables. If you need the
 sources for those statically linked dependencies inside the executables,
 then you can contact the libreboot project using the details on the home
 page; source code will be provided. You can download this source code
-from [here](ccsource/).
+from [the "ccsource" directory](ccsource/) on libreboot.org.
diff --git a/www/faq.md b/www/faq.md
index b0995b58..610f8093 100644
--- a/www/faq.md
+++ b/www/faq.md
@@ -9,15 +9,28 @@ Important issues
 What version of libreboot do I have?
 ----------------------------------------------------------------
 
-[See here](../docs/#version)
+See "Version" [in the documentation](../docs/#version)
 
 Flashrom complains about DEVMEM access
 --------------------------------------
 
-If running flashrom -p internal for software based flashing, and
+If running `flashrom -p internal` for software based flashing, and
 you get an error related to /dev/mem access, you should reboot with
-iomem=relaxed kernel parameter before running flashrom, or use a kernel
-that has CONFIG\_STRICT\_DEVMEM not enabled.
+`iomem=relaxed` kernel parameter before running flashrom, or use a kernel
+that has `CONFIG_STRICT_DEVMEM` and `CONFIG_IO_STRICT_DEVMEM` not enabled.
+
+Example flashrom output with both `CONFIG_STRICT_DEVMEM` and `CONFIG_IO_STRICT_DEVMEM` enabled:
+```
+flashrom v0.9.9-r1955 on Linux 4.11.9-1-ARCH (x86_64)
+flashrom is free software, get the source code at https://flashrom.org
+
+Calibrating delay loop... OK.
+Error accessing high tables, 0x100000 bytes at 0x000000007fb5d000
+/dev/mem mmap failed: Operation not permitted
+Failed getting access to coreboot high tables.
+Error accessing DMI Table, 0x1000 bytes at 0x000000007fb27000
+/dev/mem mmap failed: Operation not permitted
+```
 
 The backlight is darker on the left side of the screen when lowering the brightness on my X200/T400/T500/R400 
 ---------------------------------------------------------------------------------------------------------------
@@ -37,11 +50,11 @@ both on the original BIOS and in libreboot. It's a quirk in the
 hardware. On debian systems, a workaround is to restart the networking
 service when you connect the ethernet cable:
 
-    sudo service network-manager restart
+    $ sudo service network-manager restart
 
 On Parabola, you can try:
 
-    sudo systemctl restart network-manager
+    $ sudo systemctl restart network-manager
 
 (the service name might be different for you, depending on your
 configuration)
@@ -65,7 +78,7 @@ Libreboot-unstable (or git) now disables loading PCI option ROMs, but
 previous releases with SeaGRUB (20160818-20160907) do not. You can work
 around this by running the following command:
 
-    ./cbfstool yourrom.rom add-int -i 0 -n etc/pci-optionrom-exec
+    $ ./cbfstool yourrom.rom add-int -i 0 -n etc/pci-optionrom-exec
 
 You can find *cbfstool* in the \_util archive with the libreboot release
 that you are using.
@@ -76,7 +89,31 @@ Hardware compatibility
 What systems are compatible with libreboot?
 -----------------------------------------------------------------------------------
 
-[See here](docs/hardware/).
+See the [hardware compatibility list](docs/hardware/).
+
+Will the Purism laptops be supported?
+----------------------------------------------------------------------
+
+Short answer: no.
+
+There are severe privacy, security and freedom issues with these laptops, due
+to the Intel chipsets that they use. See:
+
+- [Intel Management Engine](#intelme)
+- [More freedom issues on modern Intel hardware](#intel)
+
+Most notably, these laptops also use the Intel FSP binary blob, for the entire
+hardware initialization. Coreboot does support a particular revision of one of
+their laptops, but most are either unsupported or rely on binary blobs for most
+of the hardware initialization.
+
+In particular, the Intel Management Engine is a severe threat to privacy and
+security, not to mention freedom, since it is a remote backdoor that provides
+Intel remote access to a computer where it is present.
+
+Intel themselves even admitted it, publicly.
+
+The Libreboot project recommends avoiding all hardware sold by Purism.
 
 Why is the latest Intel hardware unsupported in libreboot? {#intel}
 -----------------------------------------------------------
@@ -444,7 +481,8 @@ What *can* I use, then? {#whatcaniuse}
 -------------------------
 
 Libreboot has support for fam15h AMD hardware (~2012 gen) and some
-older Intel platforms (~2006-2009 gen). We also have support for some
+older Intel platforms like Napa, Montevina, Eagle Lake, Lakeport (2004-2006).
+We also have support for some
 ARM chipsets (rk3288). On the Intel side, we're also interested in some
 of the chipsets that use Atom CPUs (rebranded from older chipsets,
 mostly using ich7-based southbridges).
@@ -582,7 +620,7 @@ cases.
 Libreboot locks the CMOS table, to ensure consistent functionality for
 all users. You can use:
 
-    nvramtool -C yourrom.rom -w somesetting=somevalue
+    $ nvramtool -C yourrom.rom -w somesetting=somevalue
 
 This will change the default inside that ROM image, and then you can
 re-flash it.
diff --git a/www/generate.sh b/www/generate.sh
deleted file mode 100755
index 4d9e6c8a..00000000
--- a/www/generate.sh
+++ /dev/null
@@ -1,9 +0,0 @@
-#!/bin/bash
-
-[ "x${DEBUG+set}" = 'xset' ] && set -v
-set -e
-
-find -L . -name '*.html' -and -not -name 'template.html' -delete
-find -L . -name '*.md' -exec ./publish.sh {} \;
-./index.sh
-./publish.sh news/index.md
diff --git a/www/git.md b/www/git.md
index 69572d8a..06aac3d0 100644
--- a/www/git.md
+++ b/www/git.md
@@ -3,13 +3,12 @@ title: Information about sending patches for review
 x-toc-enable: true
 ...
 
-Download Libreboot from the Git repository here:
+Download Libreboot from the Git repository like so:
 
-**git clone https://notabug.org/libreboot/libreboot.git**
+    $ git clone https://notabug.org/libreboot/libreboot.git
 
 You can submit your patches via
-[Notabug pull requests](#how-to-submit-your-patches-via-pull-requests) or
-[via mailing list](#how-to-submit-your-patches-via-mailing-list).
+[Notabug pull requests](#how-to-submit-your-patches-via-pull-requests).
 
 Information about how the Libreboot project is governed is documented in our
 [general management guidelines](management.md).
@@ -17,14 +16,14 @@ Information about how the Libreboot project is governed is documented in our
 Editing the website and documentation, wiki-style
 -------------------------------------------------
 
-The website and documentation is inside the **www** directory in the
+The website and documentation is inside the `www` directory in the
 [Git repository](#how-to-download-libreboot-from-the-git-repository), in
 Pandoc flavoured Markdown. The website is generated into static HTML via Pandoc
 with the following scripts in that directory:
 
 - index.sh: generates the news feed (on the News section of the website)
 - publish.sh: converts an .md file to an .html file
-- generate.sh: with calls to index.sh and publish.sh, compiles the entire
+- Makefile: with calls to index.sh and publish.sh, compiles the entire
   Libreboot website
 
 Use any standard text editor (e.g. Vim, Emacs, Nano, Gedit) to edit the files,
@@ -68,9 +67,9 @@ How to download Libreboot from the Git repository
 
 In your terminal:
 
-**git clone https://notabug.org/libreboot/libreboot.git**
+    $ git clone https://notabug.org/libreboot/libreboot.git
 
-A new directory named ***libreboot*** will have been created, containing
+A new directory named `libreboot` will have been created, containing
 libreboot.
 
 How to submit your patches (via pull requests)
@@ -92,26 +91,3 @@ have your own Git repository with the patches.
 Once you have issued a Pull Request, the Libreboot maintainers will be notified
 via email. If you do not receive a fast enough response from the project, then
 you could also notify the project via the #libreboot channel on Freenode.
-
-How to submit your patches (via mailing list)
----------------------------------------------
-
-We also have a mailing list at
-[development@libreboot.org](mailto:development@libreboot.org)
-
-Information about this mailing list, including how to subscribe, can be found
-at <https://libreboot.org/lists/>.
-
-Archives of previous discussion on this mailing list can be found at
-<https://libreboot.org/pipermail/development/>.
-
-The mailing list software in use is
-[GNU Mailman](https://www.gnu.org/software/mailman/), so the way to use it is
-the same as on other libre software projects.
-
-If you prefer, you can submit patches the old-fashioned (as some may say,
-proper) way by sending them to our mailing list. Code review by our
-[maintainers](management.md) is done on both Notabug and on the mailing list.
-
-Once approved, your patch will be merged in the master branch of the main Git
-repository.
diff --git a/www/global.css b/www/global.css
index b325ef31..80309059 100644
--- a/www/global.css
+++ b/www/global.css
@@ -17,6 +17,10 @@ body {
     color: #222;
 }
 
+pre {
+    margin-left: 2.5em
+}
+
 #logo {
     width: 20%;
     float: right;
diff --git a/www/index.md b/www/index.md
index a091e45d..8fd886e1 100644
--- a/www/index.md
+++ b/www/index.md
@@ -10,7 +10,6 @@ mascot"){#logo}](faq.md#who-did-the-logo)
 [Install](docs/install/)                                                    --
 [Docs](docs/)                                                               --
 [News](news/)                                                               --
-[Lists](lists/)                                                             --
 [Chat](https://webchat.freenode.net/?channels=libreboot)                    --
 [Bugs](https://notabug.org/libreboot/libreboot/issues)                      --
 [Send patches](git.md)                                                      --
@@ -23,8 +22,8 @@ operating system. It is also available preinstalled from
 
 We provide user support via [\#libreboot
 IRC](https://webchat.freenode.net/?channels=libreboot) on Freenode. Development
-discussion also occurs on IRC, and on our [mailing list](lists/). Instructions
-for sending patches are [here](git.md).
+discussion also occurs on IRC. Instructions for sending patches are
+on the [git](git.md) page.
 
 Why use Libreboot?
 ------------------
diff --git a/www/index.sh b/www/index.sh
index c70c5a7a..587c5d8e 100755
--- a/www/index.sh
+++ b/www/index.sh
@@ -1,6 +1,7 @@
-#!/bin/bash
+#!/usr/bin/env bash
 #
 # Copyright (C) 2017 Alyssa Rosenzweig <alyssa@rosenzweig.io>
+# Copyright (C) 2017 Michael Reed <michael@michaelreed.io>
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -19,60 +20,74 @@ BLOGTITLE="Libreboot News"
 BLOGBASE="https://libreboot.org/"
 BLOGDESCRIPTION="News on Libreboot development"
 
+# MANIFEST determines the order of news articles in news/index.md
+FILES=$(< news/MANIFEST)
+
+
+# usage: title file
 title() {
-    sed -n 1p $f | sed -e s-^..--
+    sed -n 1p "$1" | sed -e s-^..--
 }
 
+# usage: meta file
 meta() {
-    URL=$(echo ${f%.md}.html | sed -e s-news/--)
+    file=$1
+    URL=$(printf '%s\n' "${file%.md}.html" | sed -e s-news/--)
 
-    echo "[$(title)]($URL){.title}"
-    echo "[$(sed -n 3p $f | sed -e s-^..--)]{.date}"
-    echo ""
-    tail -n +5 $f | perl -p0e 's/(\.|\?|\!)( |\n)(.|\n)*/.../g'
+    printf '%s\n' "[$(title "$file")]($URL){.title}"
+    printf '%s\n' "[$(sed -n 3p "$file" | sed -e s-^..--)]{.date}"
+    printf '\n'
+    tail -n +5 "$file" | perl -p0e 's/(\.|\?|\!)( |\n)(.|\n)*/.../g'
 
-    echo ""
-    echo ""
+    printf '\n'
+    printf '\n'
 }
 
-# generate the index file
+# usage: rss_header
+rss_header() {
+    printf '%s\n' '<rss version="2.0">'
+    printf '%s\n' '<channel>'
 
-FILES=$(ls -1 -t news/*.md | sed -e s-.*index.md-- -e s-.*presentation.md--)
-
-cat news-list.md > news/index.md
+    printf '%s\n' "<title>$BLOGTITLE</title>"
+    printf '%s\n' "<link>${BLOGBASE}news/</link>"
+    printf '%s\n' "<description>$BLOGDESCRIPTION</description>"
+}
 
-for f in $FILES
-do
-    touch -d "$(sed -n 3p $f | sed -e 's/^..//g')" $f
-    meta >> news/index.md
-done
+# usage: rss_main file
+rss_main() {
+    file=$1
 
-# generate an RSS index
+    # render content and escape
+    desc=$(sed -e 's/</\&lt;/g' "${file%.md}.bare.html" | sed -e 's/>/\&gt;/g')
+    url="${file%.md}.html"
 
-rss() {
-    echo '<rss version="2.0">'
-    echo '<channel>'
+    printf '%s\n' '<item>'
+    printf '%s\n' "<title>$(title "$file")</title>"
+    printf '%s\n' "<link>$BLOGBASE$url</link>"
+    printf '%s\n' "<description>$desc</description>"
+    printf '%s\n' '</item>'
+}
 
-    echo "<title>$BLOGTITLE</title>"
-    echo "<link>"$BLOGBASE"news/</link>"
-    echo "<description>$BLOGDESCRIPTION</description>"
+# usage: rss_footer
+rss_footer() {
+    printf '%s\n' '</channel>'
+    printf '%s\n' '</rss>'
+}
 
-    for f in $FILES
-    do
-        # render content and escape
-        desc=$(sed ${f%.md}.bare.html -e 's/</\&lt;/g' | sed -e 's/>/\&gt;/g')
-        url="${f%.md}.html"
 
-        echo '<item>'
-        echo "<title>$(title)</title>"
-        echo "<link>$BLOGBASE$url</link>"
-        echo "<description>$desc</description>"
-        echo '</item>'
-    done
+# generate the index file
+cat news-list.md > news/index.md
+for f in $FILES
+do
+    meta "$f" >> news/index.md
+done
 
-    echo '</channel>'
-    echo '</rss>'
-}
+# generate the RSS index
+rss_header > news/feed.xml
+for f in $FILES
+do
+    rss_main "$f" >> news/feed.xml
+done
+rss_footer >> news/feed.xml
 
-rss > news/feed.xml
 cp news/feed.xml feed.xml
diff --git a/www/logo/libreboot.png b/www/logo/libreboot.png
index 1146a9a5..415af776 100644
--- a/www/logo/libreboot.png
+++ b/www/logo/libreboot.png
diff --git a/www/management.md b/www/management.md
index 1e68b760..b05a1826 100644
--- a/www/management.md
+++ b/www/management.md
@@ -27,14 +27,14 @@ List of members in the core management team
 
 In alphabetical order:
 
-- Alyssa Rosenzweig is sysadmin and Public Relations manager.
-  IRC nick **alyssa**.
-- Andrew Robbins is a core developer. IRC nick **and\_who**
+- Andrew Robbins is a core developer. IRC nick **and\_who**, email
+  <mailto:andrew@libreboot.org>
 - Paul Kocialkowski is a core developer. IRC nick **paulk-X** 
-  (**X** is variable, and changes over time)
+  (**X** is variable, and changes over time), email <mailto:paul@libreboot.org>
 - Leah Rowe is a core developer (and project founder). IRC nick
-  **\_4of7**
-- Swift Geek is a core developer. IRC nick **swiftgeek**
+  **\_4of7**, email <mailto:leah@libreboot.org>
+- Swift Geek is a core developer. IRC nick **swiftgeek**, email
+  <mailto:swiftgeek@libreboot.org>
 
 Generally, the people on this list have these responsibilities:
 
@@ -44,13 +44,9 @@ Generally, the people on this list have these responsibilities:
 - Moderation of the IRC channel, mailing lists and other discussion mediums.
 - Comply with the [Guidelines for Good Conduct](conduct.md)
 
-System administration
----------------------
-
-The following people have SSH access to libreboot.org:
-
-- Alyssa and Leah have root access, for managing services and infrastructure
-- Other people can join as system administrators, in the future
+All members are granted SSH access, with varying levels of access depending on
+need. At the very least, all members are able to update the website when new
+changes to it are merged in the Git repository.
 
 People of interest
 ------------------
diff --git a/www/news/MANIFEST b/www/news/MANIFEST
new file mode 100644
index 00000000..b092d469
--- /dev/null
+++ b/www/news/MANIFEST
@@ -0,0 +1,8 @@
+news/lenovo-recall.md
+news/alyssa-resignation.md
+news/talos.md
+news/new-mailing-lists.md
+news/andrew-robbins-new-maintainer.md
+news/formalised-structure.md
+news/proposal-rejoin-gnu.md
+news/unity.md
diff --git a/www/news/alyssa-resignation.md b/www/news/alyssa-resignation.md
new file mode 100644
index 00000000..2333db0b
--- /dev/null
+++ b/www/news/alyssa-resignation.md
@@ -0,0 +1,77 @@
+% Alyssa Rosenzweig has resigned from the Libreboot project
+% Leah Rowe
+% 1 September 2017
+
+Alyssa Rosenzweig has notified the rest of the team (Andrew Robbins, Paul
+Kocialkowski, Leah Rowe and Swift Geek) of her intention to step down from the
+core management team, as per [our management guidelines](../management.md),
+due to increased pressure from school studies which prevent her from having
+time to contribute.
+
+In her email, she wishes the Libreboot project well and states that she intends
+to continue contributing in the future.
+
+I, Leah Rowe, wish Alyssa all the best in life, and I'm sure that this will be
+felt by the other maintainers in Libreboot, and I'm extremely grateful for the
+numerous invaluable contributions that she made to the project.
+
+A note about the hosting infrastructure, and sysadmin tasks
+-----------------------------------------------------------
+
+Alyssa was previously acting as the system administrator for the Libreboot
+project, in charge of maintaining the project's infrastructure. Additionally,
+she was acting as Public Relations manager for the project; in particular, she
+was handling Libreboot's application to join the GNU project.
+
+I have since assumed these responsibilities, at least for the time being, and
+I will be working alongside the other members of the team going forward.
+Since Alyssa had stepped down, nobody was in place to maintain the hosting
+infrastructure for the project. Our old hosting provider was giving us issues,
+so we switched hosting provider; this means that I'm currently maintaining the
+hosting infrastructure for the project, since nobody else was willing to.
+
+The only piece of infrastructure currently missing is the mailing list. We now
+have a fully functional mail server, and I will finish studying and installing
+GNU Mailman version 3 (the software that will be used for handling the mailing
+list). There are currently no repositories available for it on the GNU+Linux
+distribution that libreboot.org uses (Debian), so we will have to maintain it
+ourselves.
+
+Swift Geek also works alongside me, for sysadmin tasks, and has been
+particularly helpful in advising on good practises for the setup of the new
+mail server. I myself haven't had time to work on it for a while, but it will
+be up soon. The mailing list that Alyssa created was only online for a week,
+before we had to switch hosting provider for the project, and nobody had
+started using it yet, so downtime for the mailing list hasn't been a huge
+issue; people use the Notabug instance, and IRC.
+
+I will issue another news post, once the new mailing list is online. For the
+time being, the links to it have been removed on the website.
+
+The mail server itself is online, so the 4 of us on the team now have
+libreboot.org email addresses; these are published on the
+[governance page](../management.md). If anyone wishes to contact a member of
+the project directly via email, we recommend that you use these email
+addresses.
+
+Of interest: the new hosting infrastructure for libreboot.org is entirely
+libre. The main router on that network is a Libreboot system, with the router software
+running on top of GNU+Linux. The server for libreboot.org (web and mail server)
+is also a Libreboot system with GNU+Linux; postfix and dovecot for the mail
+server, and nginx for the web server. DNS is also planned (the DNS hosting is
+currently outsourced).
+
+Of further interest: libreboot.org is now IPv6-ready. All services are
+dual stack IPv4+IPv6. Stronger encryption is used in the TLS configuration for
+nginx aswell, for HTTPS, and HSTS is enabled by default.
+
+The certificate authority used for TLS is Let's Encrypt. This is used for
+HTTPS and for encrypted connections to the mail server.
+
+The new hosting infrastructure is also much more secure than the previous one,
+not just because Libreboot powers it but because of special configurations made
+on externally accessible services (such as SSH and email).
+
+I am currently looking for a new colocation provider, but the hardware used
+for hosting should be stable from now on. I have found one, which I'm looking
+into, but I'm also considering other options.
diff --git a/www/news/lenovo-recall.md b/www/news/lenovo-recall.md
new file mode 100644
index 00000000..00256b72
--- /dev/null
+++ b/www/news/lenovo-recall.md
@@ -0,0 +1,11 @@
+% Lenovo Battery Recall for ThinkPad Laptops
+% Johnny Rasnic
+% 14 September 2017
+
+[On 21 April 2015, Lenovo expanded a recall on Lenovo batteries found in ThinkPad models.](https://pcsupport.lenovo.com/cr/en/solutions/hf004122) 
+Libreboot-supported laptops that may be affected by this are the X200 and X200S. 
+To find out if you are affected, use [this Lenovo tool.](https://lenovobattery2014.orderz.com/) 
+Lenovo advises that owners of the recalled models "should turn off the system, remove the battery, 
+and only power your ThinkPad by plugging in the AC adapter and power cord." 
+Upon battery verification, Lenovo will replace recalled batteries free of charge. 
+Battery replacement instructions for the X200/X200s are found [on this page.](https://pcsupport.lenovo.com/cr/en/parts/pd003507/)
diff --git a/www/news/new-mailing-lists.md b/www/news/new-mailing-lists.md
index 8d623331..e6db70af 100644
--- a/www/news/new-mailing-lists.md
+++ b/www/news/new-mailing-lists.md
@@ -9,8 +9,8 @@ The mailing list address is
 [development@libreboot.org](mailto:development@libreboot.org)
 
 Information about the mailing list and how to subscribe are
-[here](../lists/). Archives of discussion threads
-are [here](../pipermail/development/).
+on the [lists page](../lists/). Archives of discussion threads
+are in the [pipermail development directory](../pipermail/development/).
 
 This replaces the mailing lists that we had before. The mailing list software
 in use is [GNU Mailman](https://www.gnu.org/software/mailman/), which is also
diff --git a/www/news/talos.md b/www/news/talos.md
new file mode 100644
index 00000000..724934b0
--- /dev/null
+++ b/www/news/talos.md
@@ -0,0 +1,41 @@
+% TALOS II Secure Workstation, from Raptor Engineering
+% Leah Rowe
+% 15 August 2017
+
+Recently, [Raptor Engineering](https://www.raptorcs.com/TALOSII/) has launched
+a new series of workstation and server computers. These are high-end systems,
+using the libre IBM POWER9 architecture, and the boot firmware is entirely
+Free Software like Libreboot.
+
+This is the *first* OEM producing *high-end* systems, from the factory assembly
+line, with completely libre boot firmware. The boot firmware, operating system
+and everything else is entirely Free Software. While not technically libreboot,
+the boot firmware on TALOS II is Free Software, so it was decided that the
+TALOS II would be promoted here on libreboot.org.
+
+If you are in the market for a high-end, secure workstation or server with
+100% free boot firmware (like Libreboot) and operating system, produced by
+an OEM *hardware manufacturer* that cares about freedom, look no further than
+the TALOS II from Raptor Engineering!
+
+Their website for pre-orders is here:
+<https://www.raptorcs.com/TALOSII/>
+
+An entry for the TALOS II has also been added to the
+[suppliers page](../suppliers.md) on libreboot.org.
+
+Raptor Engineering is the same company that ported the ASUS KFSN4-DRE,
+KPGE-D16 and KCMA-D8 motherboards to Libreboot. In addition, they added support
+for Hybrid Graphics on the ThinkPad T400 which Libreboot supports, enabling
+those laptops to be used in freedom (with the AMD GPU disabled, in favour of
+the Intel GPU which Libreboot has free video initialization for).
+
+In response to the TALOS II launch I, Leah Rowe, have removed the Libreboot D16
+(TALOS II's main competitor) from minifree.org, and removed the Minifree D16
+entries from the [suppliers page](../suppliers.md) on libreboot.org.
+I encourage Vikings and Technoethical, also present on that suppliers page, to
+do the same and discontinue their D16 products. The TALOS II is very important
+for the future of free, libre computing and indeed the free software community
+as a whole; if TALOS II fails, we will be stuck for a very long time without
+any viable high-end workstations that are libre. High-end hardware is necessary
+for modern software development.
diff --git a/www/publish.sh b/www/publish.sh
index f9aabf3e..9a8a6abc 100755
--- a/www/publish.sh
+++ b/www/publish.sh
@@ -1,7 +1,8 @@
-#!/bin/bash
+#!/usr/bin/env bash
 #
 # Copyright (C) 2017 Alyssa Rosenzweig <alyssa@rosenzweig.io>
 # Copyright (C) 2017 Leah Rowe <info@minifree.org>
+# Copyright (C) 2017 Michael Reed <michael@michaelreed.io>
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -19,14 +20,16 @@
 [ "x${DEBUG+set}" = 'xset' ] && set -v
 set -e
 
-echo $1
 FILE=${1%.md}
+TMPFILE=$(mktemp -t libreboot_www.XXXXXXXXXX)
 
-cat $1 > temp.md
+cat "$1" > "$TMPFILE"
 
 OPTS="-T Libreboot"
 
-if [ "${FILE}" != "./index" ]; then
+if [[ $FILE == "index" || $FILE == "./index" ]]; then
+        OPTS="--css /headercenter.css"
+else
         if [[ $FILE == *suppliers ]]
         then
             RETURN=""
@@ -41,38 +44,40 @@ if [ "${FILE}" != "./index" ]; then
             RETURN="<strong><a href='/git.html#editing-the-website-and-documentation-wiki-style'>Edit this page</a></strong> -- <a href='$DEST'>Back to previous index</a>"
             OPTS="-T Libreboot"
         fi
-else
-        OPTS="--css /headercenter.css"
 fi
 
 if [[ $FILE = *suppliers ]]; then
-        printf "\n<strong><a href=\"/git.html#editing-the-website-and-documentation-wiki-style\">Edit this page</a></strong> -- <a href=\"../\">Back to previous page</a>\n" >> temp.md
+        printf '\n%s\n' "<strong><a href=\"/git.html#editing-the-website-and-documentation-wiki-style\">Edit this page</a></strong> -- <a href=\"../\">Back to previous page</a>" >> "$TMPFILE"
 fi
 
-if [ "${FILE}" != "./docs/fdl-1.3" ] && [ "${FILE}" != "./conduct" ]; then
-    cat footer.md >> temp.md
+if [[ $FILE != "./docs/fdl-1.3" && $FILE != "docs/fdl-1.3" &&
+      $FILE != "./conduct"      && $FILE != "conduct" ]]; then
+    cat footer.md >> "$TMPFILE"
 fi
 
 # change out .md -> .html
-sed temp.md -i -e 's/\.md\(#[a-z\-]*\)*)/.html\1)/g'
-sed temp.md -i -e 's/\.md\(#[a-z\-]*\)*]/.html\1]/g'
+sed -i -e 's/\.md\(#[a-z\-]*\)*)/.html\1)/g' "$TMPFILE"
+sed -i -e 's/\.md\(#[a-z\-]*\)*]/.html\1]/g' "$TMPFILE"
 
 # change out .md -> .html
-sed temp.md -i -e 's/\.md\(#[a-z\-]*\)*)/.html\1)/g'
-sed temp.md -i -e 's/\.md\(#[a-z\-]*\)*]/.html\1]/g'
+sed -i -e 's/\.md\(#[a-z\-]*\)*)/.html\1)/g' "$TMPFILE"
+sed -i -e 's/\.md\(#[a-z\-]*\)*]/.html\1]/g' "$TMPFILE"
 
 # work around issue #2872
-TOC=$(grep -q "^x-toc-enable: true$" temp.md && echo "--toc --toc-depth=2") || TOC=""
+TOC=$(grep -q "^x-toc-enable: true$" "$TMPFILE" && printf '%s\n' "--toc --toc-depth=2") || TOC=""
 
 # work around heterogenous pandoc versions
-SMART=$(pandoc -v | grep -q '2\.0' || echo "--smart") || SMART=""
+SMART=$(pandoc -v | grep -q '2\.0' || printf '%s\n' "--smart") || SMART=""
 
 # chuck through pandoc
-pandoc $TOC $SMART temp.md -s --css /global.css $OPTS \
-        --template template.html --metadata return="$RETURN"> $FILE.html
-
-# additionally, produce bare file for RSS
-pandoc $1 > $FILE.bare.html
+#
+# $OPTS must not be quoted, otherwise pandoc interprets '--css /headercenter.css'
+# as one argument, when it is actually two.
+pandoc $TOC $SMART "$TMPFILE" -s --css /global.css $OPTS \
+        --template template.html --metadata return="$RETURN" > "$FILE.html"
 
 # generate section title anchors as [link]
-sed $FILE.html -i -e 's_^<h\([123]\) id="\(.*\)">\(.*\)</h\1>_<div class="h"><h\1 id="\2">\3</h\1><a aria-hidden="true" href="#\2">[link]</a></div>_'
+sed -i -e 's_^<h\([123]\) id="\(.*\)">\(.*\)</h\1>_<div class="h"><h\1 id="\2">\3</h\1><a aria-hidden="true" href="#\2">[link]</a></div>_' "$FILE.html"
+
+# clean up temporary file
+rm -f "$TMPFILE"
diff --git a/www/rsync.md b/www/rsync.md
deleted file mode 100644
index 9ce29aa3..00000000
--- a/www/rsync.md
+++ /dev/null
@@ -1,47 +0,0 @@
----
-title: Rsync repositories for the release archives
-...
-
-Create a directory in your web directory (e.g. libreboot/) and put one
-of these in your crontab:
-
-Libreboot project, UK (main rsync mirror)
------------------------------------------
-
-**rsync -avxP --delete --stats rsync.libreboot.org::mirrormirror
-/path/to/docroot/libreboot/**
-
-University of Kent, UK (backup mirror)
---------------------------------------
-
-**rsync -avxP --delete --stats
-rsync://rsync.mirrorservice.org/libreboot.org/release/
-/path/to/docroot/libreboot/**
-
-Princeton university, USA (backup mirror)
------------------------------------------
-
-**rsync -avxP --delete --stats
-rsync://mirror.math.princeton.edu/pub/libreboot/
-/path/to/docroot/libreboot/**
-
-linux.ro, Romania (backup mirror)
----------------------------------
-
-**rsync -avxP --delete --stats rsync://ftp.linux.ro/libreboot/
-/path/to/docroot/libreboot/**
-
-mirror.si, Slovenia (backup mirror)
------------------------------------
-
-**rsync -avxP --delete --stats rsync://libreboot.mirror.si/libreboot
-/path/to/docroot/libreboot/**
-
-Are you running a mirror? Contact the libreboot project, and the link will be
-added to the [download](download.md) page.
-
-Libreboot includes statically linked executables. If you need the
-sources for those statically linked dependencies inside the executables,
-then you can contact the libreboot project using the details on the home
-page; source code will be provided. You can download this source code
-from [here](ccsource.md).
diff --git a/www/suppliers.md b/www/suppliers.md
index 89d6a050..2c61164f 100644
--- a/www/suppliers.md
+++ b/www/suppliers.md
@@ -24,14 +24,6 @@ Laptops:
 
 -   [Libreboot T400 laptop](https://minifree.org/product/libreboot-t400/) (FSF RYF certified)
 
-Desktops:
-
--   [Libreboot D16 desktop/workstation](https://minifree.org/product/libreboot-d16/)
-
-Servers:
-
--   [Libreboot D16 server](https://minifree.org/product/libreboot-d16-server/)
-
 Services:
 
 -   [Libreboot installation service](https://minifree.org/product/libreboot-installation-service/)
@@ -43,6 +35,22 @@ Merchendise:
 -   [Libreboot X200 docking station](https://minifree.org/product/docking-station-for-libreboot-x200/)
 -   [Libreboot stickers](https://minifree.org/product/libreboot-stickers/)
 
+Raptor Engineering
+------------------
+
+Raptor is the world's first libre OEM, producing systems with libre boot
+firmware and operating system preinstalled, *from the factory*.
+
+Website for pre-orders:
+<https://www.raptorcs.com/TALOSII/>
+
+NOTE: this isn't technically Libreboot, but the boot firmware is entirely free.
+
+This is the same company that ported the ASUS KFSN4-DRE, KGPE-D16 and KCMA-D8
+mainboards to Libreboot. Raptor has also helped improve other ports in Libreboot,
+for instance they added support for *switchable graphics* on the ThinkPad T400
+which Libreboot supports.
+
 Technoethical
 -------------