Mullvad talks a lot about decentralization, then hands its resolver users to one of the biggest resolvers going. Quad9 is a good operator, and they actually fought Sony in German court instead of quietly complying. They still got ordered to block. That's the problem. A blocking order only hurts as much as the resolver it lands on is used, so every operator that shuts down and sends its users to Quad9 makes the next order a better deal for whoever files it.
exactly. and those servers are also easily blocked because they are known publicly. i see this problem right now. 4 out of 5 providers that i tried are not working from where i am
"What have you done for me lately?" Egypt controls the Suez, which is favorable for China's continuing oil import needs while they continue to accelerate off of oil.
> China has invested more than $10 billion in Egypt, building a business hub east of the capital, Cairo, and an electric rail line for industry in the Nile Delta. Annual trade between the two countries is estimated at $20 billion, according to government figures.
How does the GrapheneOS threat model account for baseband or firmware-level supply chain risks on Lenovo/Motorola hardware, given their historical consumer security incidents like Superfish? Is the open-source attestation sufficient to mitigate hardware-level tampering?
I don't think there is much use to it other than fun little gimmick.
To that end, I could see it being sort of fun to run like "ls" and see the list of post categories, then do like "ls posts/" to see all the general posts, then "cat posts/i-am-a-post.txt" to read the post.
A few weeks ago, I came across a blog post with 5 git tips. I would have loved having an embedded terminal with some mock repos preloaded with the exact situation. That's the kind of use case I'm aiming at, not just the basic commands!
The use case is for tutorials and documentation pages. sandbox.bio embeds that terminal in all its bioinformatics tutorials and people find it useful to have an environment where you don't need to set anything up before you start learning. So I wanted to make it easy for others to embed a similar environment in their training materials.
Curious. It is quite easy to make little python scripts to do useful things. Especially with LLMs. But it’s a PITA to find where to put them in an off the shelf CMS. Maybe it could work as a hybrid approach to access that CMS?
That’s what I would imagine. Have to read this post to understand what they’re about.
Please don't get discouraged, people who are rude are just projecting their own troubles onto others. The documentation/tutorial concept is a great idea in my opinion.
Whenever I see a new command-line tool advertised, I always wish I could try it right away without having to download/compile it, which isn't always easy.
Software supply chain security — We're working on an observatory that allows users to identify and monitor the world's critical Open Source packages in real time, including previously hidden parts of the dependency graph.
Maintainer burnout — Our report on burnout in Open Source has been well-received. We're working on yearly follow-ups, plus a companion report on how AI is affecting maintainer burnout.
Moving forward, the Lab's experts will direct funding to and supervise Open Source sustainability researchers doing critical work. We are already working with universities to teach the next generations of software supply chain experts.
I find it genuinely worrisome:
“Starting in 2020, ByteDance began exploring the use of edge nodes as a partial replacement for CDNs. These nodes mainly consist of idle computing resources on the Internet (e.g., smart home devices and outdated servers), and they are collected by third-party companies and sold in bundles to us at a heavily discounted price compared to CDNs.”
Well some of their keyboards also hypothetically have open source firmware yet upon introducing a hardware revision they never released the necessary files. I only know this because I actually wanted to purchase one of those keyboards specifically for the open firmware.
They still seem to be the best (approximately only) game in town if you want the ability to flash your own firmware to a standard off the shelf peripheral.
> This repository is currently in its early setup phase.
> At the moment, the repository mainly contains project scaffolding, policy files, and the initial project direction. Firmware sources, board support, build instructions, and flashing guidance are still being prepared.
> That means zgm is early, but it is intentionally early in public. The goal is not to wait until everything is finished before opening the door. The goal is to make the long-term direction visible and let the project grow into a useful open firmware platform in the open.
> That means zgm is early, but it is intentionally early in public.
"Intentionally early" is one of those phrases that means they vibed this README out in an hour with AI, and now hope that they can create firmware for it in the next 6 months.
Call me naive, but why not natively run the Nix package manager side-by-side with pacman. This allows one to safely use tools like Home Manager to manage their user environment and dotfiles declaratively while leaving the core Arch Linux base completely untouched.
