Ok I fail to see how battering kids helps them develop a bond of trust with the carers.

As I understand it is to operate the defensive missile battery they have just shipped.

Won't it? I thought you just needed to enable the apps you want. My fdroid AntennaPod is certainly usable in it.

The phrase "no loose lottery" should be a red flag right away.

Self hosting takes time and energy and most open source developers join projects because they are interested in the project not becoming admins. On top of that building a CI system is an expensive undertaking when a lot of hosting solutions provide a fair amount of compute for free to qualifying projects.

If the system is SystemReady then the EFI boot chain is fairly straightforward now. My current workstation just booted off the Debian usb installer like any other pc.

Slowly the hold outs are realising open source drivers are here to stay. I don't think propriety divers are ever going to go away but now you can have a fully open stack for all the main GPU stacks out there. I suspect more designs are insisting on open drivers and Nvidia doesn't want to be ruled out at the start.

It's interesting they've gone from a simple reskin to a downstream fork. I'm guessing there won't be much of value to find though.

Basically your only other option is to find the keys for each BluRay you own yourself. I did go through the hoops a while ago and wrote it up: https://www.bennee.com/~alex/blog/2011/04/18/playing-blu-ray-under-linux/#playing-blu-ray-under-linux

However it's a pain sourcing the encryption keys you need for each disk. While I work hard to prefer FLOSS apps over their propriety equivalents in this case I'm happy to pay the small fee for a perpetual licence of MakeMKV.

Well the account is focused on one particular project which makes sense if you expect to get burned at some point and don't want all your other exploits to be detected. It looks like there was a second sock puppet account involved in the original attack vector support code.

We should certainly audit other projects for similar changes from other psudoanonymous accounts.

Time to audit all their contributions although it looks like they mostly contribute to xz. I guess we'll have to wait for comments from the rest of the team or if the whole org needs to be considered comprimised.

While shell based RC systems do offer flexibility they also have downsides including copy and paste leading to subtly different behaviour across units. Dependency resolution was also a bit of a hack on top of scripts to deal with concepts like run levels.

The declarative approach of a proper configuration is a better and more scalable solution.