frenchman99

Yes, exactly that.

You can always build a small search webservice that you open source and that your proprietary software calls out too, removing the need to open source everything.

Linux is GPL too, didn't hinder companies making trillions on top of it.

Surprised too, if that is the fix. Wouldnt a whitelist be better than a blacklist?

In the spam protection settings, you can choose a protection level of off, standard, aggressive or custom. I choose custom.

Then, I send everything with a score of 5 or more to spam.

I don't delete any spam.

And I mark it all as read.

That cuts down on spam drastically in my inbox while still retaining it all in the spam folder should any legit email end up there.

I'm even more convinced that me being a Fastmail customer is a good thing. Fastmail has been rock solid for years.

Their email, calendar and contacts solutions work well with iOS and android (using the DAVx app).

WebApps work flawlessly on Firefox. They have all sorts of customisation for spam filtering, catch all email addresses, etc.

They don't do all the things (vpn, passwords, drive, what have you). But what they do, they do very well.

That's what happens when you give your project a common name as a name.

I agree with you. And at the same time, I often feel like it is more difficult being heard when being nuanced. It seems like what gets discussed most are strong opinions.

Open AI not being open means it will be used in ways that will benefit shareholders, not humanity as they initially planned it, unless it so happens that humanity's goals are aligned with shareholders', but I've rarely seen this happen with the big four.

You say yourself that the time data could be tampered. It's trivial to change commit dates in git. So this analysis means nothing by itself, unfortunately.

Not at all. For instance, I don't know what the next steps are, but I run SSH servers behind Wireguard, exactly to prevent them being accessible in the case of such events. Wireguard is simple to setup, even if I lack the expertise to understand exactly how to go forward.

I was thinking about reinstalling, because I'm on Manjaro Linux, which has the version in question.

But it's unclear if earlier versions are also vulnerable.

And if it did nasty things to your machine, how do you make sure that the backups you have do not include ways for the backdoor to reinstate itself?

Totally agree. With things like Dependabot encouraged by GitHub, people now get automated pull requests for dependency updates, increasing the speed of propagation of such vulnerabilities.

Going forward this will require more than a citizens investigation. Law enforcement will surely be granted access. Also, tarballs are still available in package managers if you really want to dig into the code.