One of my favorites is Batman: Arkham Knight. It uses Unreal Engine 3 and looks shockingly good despite it. Goes to show how much art direction matters.
When I need to create scratch files I usually operate in /tmp. Almost all directories there that I saw were using randomized paths (e.g. UUIDs). I guess this is to prevent problems mentioned in the article. So, I believe this would be a vulnerability of snap, not systemd.
I use Fedora where /tmp is created as tmpfs, which lives in RAM and is cleared when the system is shut down. I wonder what's the benefit of Ubuntu's approach.
I run it in a rootless Podman container using Quadlets. Instead of opening the server's ssh port, I only port-forward the container's ssh port (e.g. 22 -> 2222). I have sign-ups enabled, since I want people to be able to contribute (or just create issues). But I have configured the server so that nobody can create a repository. They can still fork my repos and send a pull request.
I have yet to experiment with Actions. I assume the safest option would be to only enable it for my own commits, but I am not sure.
It doesn't need to know your age. It just provides a way to take a note of your birth date, only if you want to. The system already has a place to write your name and home address. All are optional and practically nobody uses them.
Well, some people called me paranoid and said "us regular people don't have anything to hide" when I told them how much data Meta collects about us. Of course, this frustrated me as my threat model is very small compared to most people here.
I explained how free services where instead the user is the product work, and how much I disagree with this model. I informed them that I use FOSS almost everywhere and that they exist for the greater good of humanity.
Nice. Unfortunately, it does not offer choosing Immich as an image viewer. I guess this is on Immich to fix, though.