nwellnhof

> Ukraine gave up their nuclear weapons

Ukraine never had nuclear weapons. Russia is the sole legal successor of the USSR and these were all Russian nukes on Ukrainian territory.

> in exchange for peace from Russia

There isn't a single mention of nuclear weapons in the Budapest Memorandum.

> Firefox on Android lags during scrolling on multiple sites that do not lag on Chrome.

It starts to lag after a while on some sites but force-stopping occasionally fixes it for me.

> We're both wrong, it's 38.646,02€

Assuming you don't pay Kirchensteuer, it's almost €40,000.

> you're already entitled for social benefits (Wohngeld)

No, you're slightly above the threshold but in any case this doesn't say much. If you're talking about families, I'd also assume that your partner earns a little extra.

Anyway, the median gross income in Germany is €54,000, so you seem to be implying that the majority of Germans are unable to live a decent life. Maybe you should talk more to people outside your social bubble?

It's more like €40,000-50,000 after taxes and contributions to health care, social security and the German pension fund. Enough for a modest lifestyle in Germany. Many OSS contributors aren't motivated by money after all.

> They don’t employ software-developers.

They actually do employ developers: https://www.sovereign.tech/programs/fellowship

> The projects need to apply repeatingly for funding.

Still better than no funding at all.

> We can compare the output of the same program for both targets and flag any differences.

This is called differential fuzzing and is one of the most powerful methods to find bugs in all kinds of software.

Only in a closed economy.

Even worse, checking for overflow before casting can be tricky: https://stackoverflow.com/questions/526070/handling-overflow...

It's sad that comparison operators in C/C++ can lead to UB. Comparing unsigned to signed ints or comparing floats to ints is something the compiler could make work reliably at very little extra cost.

> All members must be current Linux Foundation members and sign the participation agreement and NDA.

Just another opaque and exclusive subproject of the Linux Foundation.

It's completely absurd that this is funded by Linux Foundation while Apple doesn't support FreeBSD with a single penny.

The sad thing is that stepping down as maintainer is the only thing that raises sufficient awareness. You can put a disclaimer in your README that you need help, you can run around and beg for support, but this is unlikely to have any effect. It's only this kind of finality that can change things.

After I stepped down as libxml2 maintainer for the first time, I received a donation from Google which made it possible to continue my work. This wouldn't have happened otherwise. Of course, this isn't a sustainable approach to funding, but I'd encourage maintainers to step down sooner if they feel that they don't get enough support. You'll be surprised how many people will reach out to you after you made this step. Nobody will blame you if some support materializes and you rethink your decision.

> ~1.8Mbpd (million barrels per day)

Mbpd = thousand barrels per day, MMbpd = million barrels per day

In my experience, everyone got their act together except Google. I also used to receive massive amounts of spam from Azure and Sendgrid but this eventually stopped. Now 80% of the spam I receive is from the Google network, mainly Google Cloud.

The law says all men aged 17 and older, not military-aged.

https://www.gesetze-im-internet.de/wehrpflg/__3.html

I think a revolution caused by this war is more likely in countries like Egypt. The Arab Spring was triggered by a rise in food prices after all.

In this case, the name is already so generic that you might even be denied a trademark in the first place.

On top of that, all these spam and phishing emails are sent through Google servers. About two thirds of spam I receive originates from Google, 12x more than AWS and 20x more than Microsoft. This is completely insane.

Stable Diffusion was developed at LMU München. There's also lots of interesting stuff coming out of RWTH Aachen.

You can do amazing things with only a single SID channel. One of the most impressive examples is the in-game music of Hawkeye [1] which allows to use the remaining two channels for sound effects.

[1] https://youtu.be/es-rWnVSJ1c

The majority of Germans is completely biased towards Zionism because of their history, so it's more of a cultural than a personal thing.

First of all, you have to realize that it's impossible to measure inflation and purchasing power objectively. It always depends on a highly subjective (and gameable) basket of goods. But inflation and purchasing power are a thing, so it's a bad idea to ignore them. You just have to keep in mind that all these economic time series are a lot less accurate than they seem.

But if you want to account for purchasing power, it doesn't make sense to ignore inflation. So the "GDP, PPP (current international $)" data which the article refers to seems mostly useless to me. You really have to adjust for inflation as well (constant $) and the picture will become quite clear:

https://data.worldbank.org/indicator/NY.GDP.MKTP.PP.KD?locat...

Just start with "Step 13a: Finding a Tax Advisor" and they will help you with the rest.

Reminds me of an old April Fools' prank in German c't magazine. They offered a defragmentation-like tool for HDDs that claimed to distribute 0s and 1s more evenly on the drive to make it run more smoothly and extend its lifespan.

Depends on the jurisdiction. In Germany, practically every photo is copyrightable.

The dietlibc author is a different person but with a very similar name.

About a day after I resigned as maintainer, SUSE stepped in and is now maintaining the project. As announced here [1], I'm currently trying a different funding model and started a GPL-licensed fork with many security and performance improvements [2].

It should also be noted that the remaining security issues in the core parser have to do with algorithmic complexity, not memory safety. Many other parts of libxml2 aren't security-critical at all.

[1] https://gitlab.gnome.org/GNOME/libxml2/-/issues/976

[2] https://codeberg.org/nwellnhof/libxml2-ee

As soon as you start paying individual maintainers, it stops being nonprofit OSS they work on. If you direct your funds to other charities, you're only shifting the tax issue to them. If you want to give money to maintainers with no strings attached, it's basically impossible to avoid double taxation.

Concrete examples: GNU software, musl C library, everything from x.org and freedesktop.org. Just have a look at the top 1,000 projects from the Debian popularity contest and you'll find many projects outside the Github bubble. Why not use the Debian package name in your nomination form instead of a Github URL? Any project important enough to matter will have a Debian package, right?

If you're trying to come up with something like the "criticality score" based on repo metadata like the OpenSSF, you're likely to fail just like they did. Starting with Debian's popcon data makes a lot more sense, in my opinion.

> any project important enough to matter will have at least a GitHub mirror

That might be true, but many of the mirrors are unofficial.