I am still not clear what supposed crime he has committed other then pissing powerful people off. He should get a reward for that.

Supply chain attacks also show one reason that using older software like Debian stable may be a better plan for things that matter. All new software versions need some time to be tested and vetted.

It also shows the importance of security in depth. That less is more in terms of code dependencies and complexity. That knowing dependencies is as important as knowing your code.

I would consider the xz incident to be a success. The supply chain attack was found pretty rapidly. We have already seen many of these and we will see more. Ones I remember off the top of my head include Linux Kernel, NodeJS, Python PyPI.

I would not over blow this. Security is an ongoing activity and all security is porous.

Yes. This is why I would never use an iPhone. Closed walled garden. Cannot even load apps from other repos.

I am not sure why anyone cares. As far as Reddit, I moved on last year.

Management greed, stupidity, and self serving is perennial. Nothing new there.

Firefox is far from irrelevant. Pure stupid click bait. Market share of courses is a sad thing and may lead to irrelevance when most web sites stop supporting. In the late days of Netscape and the early days of Firefox that was the case... lack of website support. I am just starting to see that again.

I totally do not get why people have to try to prove to themselves that masks do not work. More than likely they do especially if you have a new good well fitting mask changed frequently and you use and change it properly. There is also the question who it helps more, you or the people around you.

A huge problem during the pandemic was mask availability, and people using them properly even if they had a supply to do that which mostly no one did. So result of mask use is a good question but it may say nothing about how well masks used properly work.

This is the thing about Chrome and the whole Chromium based ecosystem. Why on earth would anyone use a browser from an Ad company.

By the way. They are planning on putting it in Android apps too. So there one gets little choice. A non-starter like Apple where you cannot even load your own apps and app stores or Android from an Ad company where you can with effort at least choose your own software and even image your own OS.

Relax. Just use a different server. May not be exactly accurate either. How in the world do you have any idea who uses what server. I have never used this server.

One way is join the FSF and use their server. There are others or host your own too. The load and cost needs to be spread anyway.

It was always kind of a scam. Computers always had color temperature settings. It is a sad fact that they use to all be set to around 9300K color temperature which is very unnaturally blue. Best color rendering is actually 6500K and people like me always reset them once purchased. You can also set them lower then that too say 3400K too.

Reason device makers used high color temperature was showroom. Two displays side by side, the lower color temperature will look yellow and no one will buy it. All about customer manipulation and marketing. As an engineer this always bothered me. Sell something not configured correctly to get the sale.

The one way lower color temperatures are better is that the eye is not as well corrected in the blue so vision should indeed be sharper with Amber sunglasses for example. There is some science behind that. Same for sleep issues. Lot of the other stuff seems more marketing and questionable.

Sounds like Rush was one of those risk takers and visionaries. These sorts of people hold themselves up as beacons of light and others do too until the risk taking catches up.

I remember I had a boss that liked some book they read about one of these sorts of people. My boss even had the company buy each of us a copy to read. I skipped it. What I remember though was the the guy died while doing one of their risky things maybe 6 months later. Just thought it was classic. Guy held up as an example by people in authority shows how stupid those people are by getting himself killed.

The biggest issue is who pays for the server infrastructure at scale.