nobody42
[0] https://en.ubunlog.com/Canonical-will-go-public-this-year/
> According to Shuttleworth, the company is now ready to go public , something they attempted in 2005, but the conditions are now more favorable.
> meaning that some Canonical products will cease to be developed by the company.
https://docs.nvidia.com/datacenter/tesla/driver-installation...
https://www.theverge.com/2019/3/11/18260816/china-exposed-da...
Which only a hard-fork could fix, and who have the resources to fight that.
[0] https://www.accc.gov.au/media-release/google-llc-to-pay-60-m...
[1] https://www.theguardian.com/technology/2021/apr/16/google-tr...
In democracies gradual improvement is possible. In dictatorship it's not.
The real answer is, where do you want, and your children, to live? With barred university education due to parent's social score? With collapsing schools? With kindergarten target practice of "enemies"?
(I'm a contributor to the repository)
But when it comes to owning a home in China, you can't do it - because you can't own the land, only lease it. So effectively, anything could happen with your home.
Then, construction in China is a pyramid scheme. Highly praised amount of infrastructure and empty ghost cities is an effect of that [0]. Combine that with rampant corruption (guanxi)[1] and culture of corner-cutting (chabuduo)[2], and you will end with bridges and multi-story buildings crumbling like sand, waiting to collapse at any moment.
All of that with an addition of aging population due to half-witted decisions of delusional, unchecked power (one child policy) leaves China with construction it wont be able to maintain, not even with immigrants, because of recent decisions of tribal nationalism[3][4].
Trends are saturated about China's prosperity and superiority. But if you want actual prosperity - you cant rely on algorithms alone.[5]
With your stats you imply that a person could feel safe owning a home in China. Could you feel safe accounting for all of that?
[0] https://www.youtube.com/watch?v=oWDty6iNcgA
[1] https://en.wikipedia.org/wiki/Guanxi
[2] https://www.reddit.com/r/China/comments/ub6lwn/what_is_the_c...
[3] https://www.youtube.com/watch?v=NUaYNhzEq_E
[4] https://www.youtube.com/watch?v=4Jilv0b27m4
[5] https://www.firstpost.com/world/tiktok-manipulates-content-b...
Apart from high-overhead solutions like VMs and containers, there are seamless and maintenance-free solutions (after the initial setup):
- systemd service hardening [0] [1]
pretty powerful, but it's a blacklist approach - whack-a-mole
- AppArmor [2]
Whitelist, proactive approach. Contrary to SElinux, it's not a programming language, and could be grasped pretty quickly. I made a tool to easily convert AA logs into usable rules. [3]
[0] https://github.com/alegrey91/systemd-service-hardening
[1] https://github.com/desbma/shh
https://every-door.app - intermediate on-the-ground app for smartphones
https://rapideditor.org - AI-assisted mapping in browser
https://www.hotosm.org - task-based mapping in browser
https://josm.openstreetmap.de - advanced editor for desktop (this post)
https://www.comaps.app - actually use the map with ability to make minor changes
[0] https://streetcomplete.app
Lets say you are building a delivery robot. You need not just situational awareness with LiDAR, but also a map for route planning. Will Google give you access for such technology if your innovation is a direct competitor?
If its not a delivery robot, but firefighter robot?
[0] https://www.eff.org/deeplinks/2013/05/google-abandons-open-s...
[1] https://wp-events-plugin.com/blog/2018/07/17/google-maps-api...
CoMaps rendering is almost instant and map palette is easier on the eyes.
Please make an effort to improve underlying OpenStreetMap dataset:
https://streetcomplete.app - basic task-based, on-the-ground, app for Android
https://every-door.app - intermediate on-the-ground app for smartphones
https://rapideditor.org - AI-assisted mapping in browser
https://www.hotosm.org - task-based mapping in browser
https://josm.openstreetmap.de - advanced editor for desktop
It's evident that Mandatory Access Control has become, ahem, mandatory.
Both VM and inference engine processes should be confined, at least. There's a project where it's already done for many applications. [0]
Additionally, `lockdown=confidentiality` in kernel boot flags greatly reduces attack surface. (interferes with unsigned modules like NVIDIA drivers) [1]
Then AppArmor profiles could be written for absent applications with a learning-mode tool [2]
Nothing is bullet proof, but these approach significantly reduces potential consequences [3]
[0] https://github.com/roddhjav/apparmor.d (I'm the contributor)
[1] https://madaidans-insecurities.github.io/guides/linux-harden...
[2] https://github.com/nobody43/apparmor-suggest (I'm the author)
Favorable environment of Linux distros is an initial phase of technology. This state is gone for years now, AI is just making it evident. Adapt or become obsolete.
Can't say whether the of lack funding (move to Cockpit from Red Hat) is the reason, or maintainer is just an obstructionist (strictest feature policy).
Shady sponsors (if there is any) doesn't matter when transparency is in place. Want to reveal malicious intent? Provide a PoC.
Only hardware that supports bootloader relocking are Pixel devices. There are no others to consider development effort - plain simple. No, you can't use an unlocked device as a daily driver. Up to a minute out of your hands (or triggered reboot from public power outlet, due to outdated Lineage firmware) - and your bootloader is rewritten with one that collect your FDE secret and sends it to a remote server.
Opaque hardware? Which hardware are better and more transparent than Titan and upcoming OpenTitan? Bruteforce protection which considers current ambient temperature - what more do you need?
I can't say anything about VPN affiliation, but everything else is complete bollocks.
https://presentations.nordisch.org/apparmor/
https://github.com/nobody43/apparmor-profiles/blob/master/ng...
https://github.com/nobody43/apparmor-suggest
Disclaimer: I'm the author of both repos.