Still, it's strange to me that the GPL is considered OpenSource while the SSPL is not. When the GPL was first released, its requirement that all linked modules be GPL-licensed wasn't so different from what the SSPL enforces today at the network level. I see the SSPL as analogous to the GPL, and the AGPL as analogous to the LGPL, essentially relaxing the requirements either on linking (in the case of the LGPL versus GPL) or on network interactions (in the case of the AGPL versus SSPL)
'We first estimate the supply-side value by calculating the cost to recreate the most widely used OSS once. We then calculate the demand-side value based on a replacement value for each firm that uses the software and would need to build it internally if OSS did not exist. We estimate the supply-side value of widely-used OSS is $4.15 billion, but that the demand-side value is much larger at $8.8 trillion.'
True, but I suppose this is at least partially compensated by the cost of such a 0-day. For sure, a 0-day on Chrome is a lot more expensive than one on Firefox
Well, unions tend to average the outcome. But IT positions, being on the top side of the employee distribution, can typically obtain more.
I can give you a real-world example. Our company (Italy) office was relocated, and unions entered negotiations to obtain three days of remote work for the entire personnel. However, I and others refused to sign the agreement because, with more negotiation power, our target was full remote work. However, in doing so, we were undermining the union positions, which made them unhappy. Fortunately, things ended well; all personnel got the three days, and a few other people were granted full remote work.
From what is written, they plan to reduce the control of where ads are placed, but still allow enabling or disabling them.
Anyway, at present it's possible to disable them if you have reached the monetization requirements on the channel, like 1000 subscribers and some amount of hours viewed.
I'm also a heavy user of ad blockers, but there is something to be said in defense of YouTube.
Creators have the final decision on the ads shown. I have a YouTube channel, and I always disable monetization on all my videos, so no ads are ever shown on my channel.
If you see an ad, it's because the creator decided to include one. YouTube is simply the platform that enables this choice.
The Clang static analyzer is integrated into the build pipeline. Any warnings will cause the build to fail. Additionally, build with the flags -Wall and -Werror. When testing, run with runtime checkers such as Valgrind and sanitizers.
Periodically, run other static analyzers like Klocwork and Coverity. They can catch many more issues than Clang. It's not that Clang is bad, but it has inherent limitations because it only analyzes a single source file and stops analysis when you call a function from another module
As far as I know fixed point numbers have a fixed fractional part in bits, but this is different from using integers with a multiplicative factor, like 100, to represent correctly a fractional part as 1/100.
Cool. If I can propose a little improvement, it would be nice to allow an arbitrary long nonce. Like, feeding the first 96 bits of the nonce into GCM, and the rest in CBC-MAC.
Looking at the implementation, the longer nonce is hashed to 128 bits, with the last 32 used as a starting counter. So, if you don't use the whole 32 bits space of the counter, you are effectively using more than 96 bits nonce.
Sure, no more than 128 bits, but indeed better than 96.