Something like Amazon Glacier is your best bet if you don't access data often and are okay with paying a (per-GB) monthly fee. Otherwise, you may want to build a NAS PC with high levels of disk redundancy (RAID5 or RAIDZ2)

A working nuclear thermal propulsion (NTP) engine was already built in the 60s under NASA's NERVA project. It is one of the highest technological readiness level solutions we have to the dilemma of high specific impulse versus high thrust present in the current spsce engine technologies. Imo we need something like this to make manned interplanetary missions viable.

Looks like Meteor Lake iGPU will be supported though, which is still cool for VMs with GPU accelerated desktops.

Insane it's controversial to expect that other countries pay for their own defense.

$25/hr (about $50k/yr) is nothing for the kind of professional/software jobs typical of H1Bs.

Example: https://grapheneos.org/faq#baseband-isolation

Yes, the baseband is isolated on all of the officially supported devices. Memory access is partitioned by the IOMMU and limited to internal memory and memory shared by the driver implementations...Earlier generation devices we used to support prior to Pixels had Wi-Fi + Bluetooth implemented on a separate SoC. This was not properly contained by the stock OS and we put substantial work into addressing that problem.

Baseband modems were not isolated from kernel memory in stock Android, GrapheneOS had to do it themselves using the IOMMU. We do not know for sure due to the proprietary/closed-source nature of baseband modem drivers, but we have no reason to assume any OEM (Samsung, Xiaomi etc) implemented proper isolation of baseband modem and system memory.

Use argparse instead of input

ZFS without having to faff around with DKMS

It doesn't care about copyright or authorship, which becomes a huge problem due to content no longer having a real home in IPFS, everybody can pin, cache or share content on IPFS.

Sounds like a feature, not a shortcoming

Ubuntu LTS has the exact same problem. And unlike Ubuntu, with Debian you have the choice to use sid which is as up to date as Arch usually

GrapheneOS has strict sandboxing for all apps. App A cannot talk to App B unless given explicit user permission. Google Play services is not installed by default, and if you do install it, it's subject to the same sandbox. This basically addresses all userspace tracking concerns, unless you actively choose to weaken those defaults.