div72

It'd be far more acceptable to block the CG-NAT IPv4 addresses if you knew that the other non-compromised hosts could utilize their own IPv6 addresses to connect to your service.

Have you seen headscale? It's a bit of work if you don't have a selfhosting setup but it enables you to use the service without being at the whim of Tailscale.

What? Why is your NVIDIA modules even in the boot partition? My largest /boot is on Fedora and that's 454MiB, 87MiB on Arch and 30MiB on NixOS.

EDIT: "With grub, the situation varies; if the device has a graphics card, it usually means that driver modules need to be placed in the boot as well.", "usually" carries a lot of weight here, none of the systems I had had this kind of a requirement.

Except TLS-SNI sends the hostnames in plaintext during the handshake and you can't disable it in at least Firefox AFAIK.

Are you sure you were informed by Thunderbird and not by your SMTP server?

Only for the optional "read time travel and world domination plans" module.

Copyleft licenses are restrictive as obligations are restrictions. "You must provide a source code to your users" is equivalent to "You cannot use this software if your source code is not available to your users".

Freedom is a finite resource in which copyleft licenses take from the developer to give to users. (which ends up at the same point as the article but I prefer wording it this way.)

Isn't ARM's TrustZone equivalent to ME/PSP on Intel/AMD?

> This is a guest post. The views expressed here are solely those of the author and do not represent positions of IEEE Spectrum or the IEEE.

The post is about unsolicited requests at startup, Tor Browser does not connect to Tor unless you click Connect or enable the auto-connect option.