gian

I don’t trust them considering their enthusiasm over it and the comments about Finnish history.

If, as it seems to emerge, they are “forced” to do it under legal advise, it is completely irrelevant that you (or anybody else for that matter) trust them or not.

About their “enthusiasm”, all I can see is that after the Russian invasion of Ukraine, Russia is not sees as that friendly and trustworthy anymore: they had a signed treaty with Ukraine to preserve Ukranian integrity in exchange of the nuclear weapons (from URSS), we see how much Russia valued their own word. I cannot blame someone from a country which share a border with Russia for not having simpaty for Russia.
True, someone innocent will pay, but it is not that different from having Russian scientist turned away from CERN or any other situation where there was a collaboration. It is sad but on the other hand it is a consequence.

Go read “Finnisu Civil War: History, Memory, Legacy” by Tepora and try to laugh at the comments about history. Impossible.

As you cannot laugh to any other memory of any other war.

True, but sometimes you have not any other choice.

It’s literally just speculation.

I agree.

Even if it were true, what the fuck does that have to do with the nationality of a few Linux contributors?

Probably nothing, I agree. But since there are sanctions against Russia I suppose they have not really any other choice.

Is that sad ? Yes, but it is life.

I suppose any law in any jurisdiction you want to use it, don’t you think ?

Guys, are you all really that young to not remember alla the fuss with crypto software ? Same thing here: you want to distrubute something in a country, you need to follow the country’s law, even if they are stupid.

“Compliance requirements”? The kernel’s american now?! WTF?

Nope, but it is not above the law.

Even Wikipedia, which is a shockingly bloodthirsty pro-NATO outlet, admits there is zero proof that a “Russian state actor” did this, there are just “western security experts” claiming it (as usual), and opinion is divided.

Well, I don’t think that a “[insert your preferred state] state actor” would ever coming out saying “yes, we tried to to it”.

Not to say that what Wikipedia say is false but on the other hand I am not sure how to check if it is true, in these cases.

Only real option is to crypt them before putting them on the VPS, but at this point a VPS is pretty useless.

It is not that simple.
For hardware attacks, older hardware are probably safe since the attacks are specifics to some newer features. I really doubt you can deliver a Spectre attack on anything up until the Pentium or even later.
On the software side, there could be some security bugs to which some older version could be vulnerable since there were not the vulnerable code at the time. Granted, there could be some security bugs that were not yet discovered in older codebase.

I am using both of them without any problem.

The main advantage of Flatpaks (and things like AppImage) is that you have a single “executable” with everything you need and sometime that is useful even if the software is Opensource but the building dependencies are a nightmare. Subsurface (a dive log software) is an example.

If the AUR package is a simple build (or a binary which is a converted package) then go for it. If you need to start building a lot of additional package from AUR to meet the dependencie then I would suggest, in order, to look for the Flatpak (or AppImage) package or to install an helper to build the packages

Vanilla gnome is perfectly fine by itself if you understand the workflow.

Well, maybe it is the DE that should be able to adapt to my workflow and not the other way around