I wonder how many people saw this coming.
I get the sense that a lot of people were blindsided recently, not only from large recent donations to some groups, and Linus using AI... but also OSI declaring a focus on politics.
IDK but I have a lot of issues with that list anyway... they seem to have a strange definition of "permissive AI policy", i.e. any mere mention of an AI service gets you on the list.
Example: OpenBSD and NetBSD both show as "permissive" on the list, even though both have publicly stated otherwise, just because there are one or two commits where someone (prominent dev) commented something like "I had help from Claude but you can't tell, and I personally vouch for this and I know what I'm doing."
If you use Tor + NoScript, you won’t be unique
Hard disagree, there are still ways to uniquely fingerprint you.
Thankfully modern browsers use Certificate Transparency, and there's no indication that any compromised certs were actually used publicly.
However, there are many devices that use TLS which are not browsers, and those devices could in theory be selectively targeted with an evil cert without alerting the public CT servers.
I think the hivemind has already spoken, they are taking this to mean that the kernel is now vibe-coded and people are actively jumping ship.
IMO "more private" is pointless when you're still unique either way
This is actually much worse for privacy than leaving everything stock, because a site can tell you aren't downloading or running any javascript, and that immediately puts you in an extremely tiny bucket of people it needs to differentiate from, making any differences visible via IP/TCP/TLS/HTML/CSS much more unique.
And yes, fingerprinting is possible with just HTML and/or CSS... I would argue even moreso without JS.
Obligatory don't put all your eggs in one basket.
There's countless alternative git forges, self-hosted or not... I suggest people use multiple for redundancy, even if they are just read-only backups.
Maybe it would be nice if git had a way to add multiple repo URLs for the same remote.
It exists apparently: https://stackoverflow.com/questions/849308/how-can-i-pull-push-from-multiple-remote-locations
They actually do move... cities/towns/place names expand and contract, and incorporate and unincorporate all the time... it's a huge pain in the ass for our system at work. Some place names are also 100% made up by the USPS and only used by them, and guess what, you still gotta support it. Even the professional paid databases don't contain every possible place name people use.
And my comment was more about geocoding of exact addresses, not whole cities.
I could never imagine dropping $7k on a laptop