KAMSPioneer

Just to add here that this guy doesn't have a "standard" Spanish accent. He was from Andalucía (I don't remember where exactly), a region rather known for its accent being difficult for even native speakers to understand.

Anyway after I moved to Andalucía I now can understand the story he tells, but I have to pay close attention!

What GP likely means is that a Protonmail user can exchange encrypted emails with a non-Protonmail user without doing anything except importing the non-Protonmail user's keys once.

This could allow a single technical user with an elaborate PGP key and email setup to convince his or her social circle (or at least email circle) to switch to Protonmail and follow a set of (comparatively) simple steps to get Proton to recognize the key to their non-Proton address.

Thereby having PGP-encrypted conversations with users who don't know how PGP works, but followed their friends' instructions to use a slightly different webmail interface. Meanwhile the technical user can use a smartcard, a self-hosted email server, or other madness that a normal user would never tolerate.

This list seems...odd. For instance, the list decries the permissive AI policy of the Linux kernel, of Fedora, of Bazzite/Bluefin/etc...and then includes Secureblue as an alternative...?

Secureblue is a neat project, but as you say, this would make more sense as a generic discovery list. If you want to avoid projects with a permissive AI policy, you should probably take into account that Secureblue is based on bluebuild (from the Bazzite team), Fedora, Linux, etc etc etc.

Ah, you're right! Somehow I "autocorrected" that when reading TFA, now it makes more sense.

Regarding internet infrastructure, the fiber optic network seems to be quite robust these days. There are still places where it isn't available, but compared to e.g. the US it's another world entirely. Even small cities typically offer 1 or sometimes 10 Gbps hookups in many areas.

Regarding bureaucracy I'm afraid that there has been no such progress. Extremely frustrating that even when I do everything right, I get told to come back another day for my trámite because they just...haven't done it! Sorry!

Also American, and I'm interested why you praise the education system. I have a child who will be entering the Andalusian system at some point and although it seems better than my Oklahoman system, that is, uh...damning with faint praise.

Some of my non-Spanish European colleagues also have commented that the education system is kind of "good not great" especially compared with other Western/Central European countries. However, I understand the Spanish system to be somewhat federated; perhaps the difference between Extremadura and Andalusia would explain the difference in opinion.

Wait, really? I'm a native Midwestern/Great Plains American English speaker (I remember reading the Harry Potter books as a kid and wondering why all the -er words were spelled wrong) and I say "PRY-mer." I have never heard anyone say "PRIM-mer" in my life.

Am...am I being punk'd...?

> weird systemd stuff

I mean, if you have zero experience with systemd, then yes. By contrast, if you've ever worked with any systemd unit files at all, then all the "systemd stuff" will be very familiar.

Which, if you're doing sysadmin type things on almost (e.g. not Alpine) any mainstream Linux distro in 2026, you should expect to encounter systemd unit files in your day-to-day.

I'm not qualified to comment too heavily on Netflix's infra, but I'm fairly sure that they don't _exclusively_ use AWS. There are things they run there, sure, but I understand that their actual content distribution is run on their own metal, and on FreeBSD. AWS hosts other stuff (auth, recommendation algos, etc).

Aha, thanks! So I think that raises the question of whether e.g. RHEL is affected. Technically it could be argued that they don't add any additional restrictions, but I wonder if Colorado will see it that way.

But the text says "or," not "and." So by my interpretation if you process user data but are available via "free, public" repo, you're not covered. I presume "free" is defined elsewhere in the text, and that it approximates "open-source."

I mean, where I work we offer machines to external users where they have shell access to be able to do their science, but I don't want them to have root access. Other institutes we work with (like supercomputer networks, etc) give us/users non-root access.

When things like CVE-2026-31431 or the bug that this thread is about affect our systems it causes a big headache. Yeah, we firewall off what we _can_ by having different machines doing critical things versus the ones where science users have code execution, but we don't have the resources to give every user their own machine.