That's most likely a disagreement on terms. In the media world, video is only the moving images, not audio. This is separate from images, that are meant to be still images.
Yes. Caveat: It might not really be worth it if all your infrastructure is managed by these newfangled infrastructure-as-code-things that are quick to roll out (OpenShift/OKD, Talos, etc.) and you have only one repo to change SSH keys (single cluster or single repo for all clusters).
There are some serious security benefits for larger organizations but it does not sound as if you are part of one.
Well, double standard is of course a thing (like accusing the only democracy for not being democratic enough without saying anything about much more oppressive regimes around; but also about surveillance in one place and also another). I think it is to make a different point though.
This funding from the US was to get around surveillance (everywhere), so it makes sense to argue, that a rival global player exports surveillance tech, because the funded tech is to counter that. That argument would not work with Israeli surveillance tech.
As if the guardian was overly pro-Israeli. I would argue that it makes more sense in that context to mention Chinese surveillance tech, because it's not an ally of the US.
Really important to first, pick that example of content moderation and then point out that he's an Israeli. Maybe think about why you used that example when there are countless others regarding free speech/internet freedom.
Very unhelpful comment. Some people don't want to run on anything AOSP. Being able to manage the device with standard linux tooling is a major plus for some people.
I don't think your run often into these things, because of Rust's ownership enforcement. But I might be misunderstanding you, because it's all pretty abstract and I might not have the whole context.
There is relatively little Rust in the kernel, but there are even less Rust CVEs. In this cycle alone there were 160 CVEs, one in Rust. The first one! The amount of rust is way less than 1/160 and even that statistic is off, because one should count all CVEs.
One problem is that you can't filter its "syscalls" as you can regular syscalls. This removes a security boundary that e.g. container runtimes regularly use. So you cannot use it in your regular kubernetes cluster without weakening its security for these pods.