the_permalink() escapes and echoes.
Use newer home_url() function and escape it.
Use attribute-safe title function.
Don't use redundant title attributes.

See also https://core.trac.wordpress.org/ticket/24203.
Merge pull request #5 from nacin/index-fixes

Fixes to some HTML attributes for index.php