can’t see how this can possibly be a good thing, you know it will mean funding with conditions.

Well, the things they are funding will get funded? How is that a bad thing?!

The conditions range from very broad, like “fix bugs” (curl), over somewhat specific like “improve cross-platform compatibility and the Linux RNG” (Wireguard), to very specific like “create a test-suite and drive development on the Fediverse account migration functionality” (ActivityPub).

You can see more for yourself at https://www.sovereign.tech/tech

All of these seem to be rather tame conditions that are just there to ensure the funds get used in the way they were intended to be used. And I don’t really see how that gives the STF any sort of direct control over these projects, while it gives those projects resources to achieve more than they might have otherwise. There are no long-term funding models that would enable implicit control over these projects.

They could set up an account on one of the larger well established Canadian instances or even better start up their own.

Both of these options have their pros and cons, and I think it is important to explain these well to the council if you want to have any hope of convincing them.

A line of argument that has had some success in Europe is what has become known as “Digital Sovereignty”, basically a fancy term for saying government should control its own infrastructure. So you might want to sell it as an easy way to have a permanent archive of public communication and a method for it that is under their direct control, rather than as a way to find more engagement.

As others have said self hosting has a maintenance and moderation overhead, but this can be lessened by running an instance together with other cities while still retaining most of the benefits of self hosting.

Seeing from the linked cross-post that this is about Port Alberni, and considering that http://portalberni.ca/ returns an empty reply while https://portalberni.ca/ lets me know I have been geoblocked because I’m outside of Canada and the US, I’d say you have an uphill battle before you though. These people made a website (probably paid for it, too), and then killed much of its use by geoblocking most of the world.

Good luck.

FYI you have a typo in your last screenshot (This sign m[a]y not…):

android auto

First I heard of this, but since it seems to be just some software that runs on the hardware of car manufacturers it seems rather unlikely. But very theoretically possible, if the car manufacturer was using default process scheduling in a CPU constrained machine and now switches to real-time scheduling in an update. But that was possible for years before this news, the code has just been mainlined to the default kernel now. If the car manufacturer cared about that they would probably have done it already with a patched kernel.

[…] a public institution is really not a great example of the general population […]

Which I touched upon in my disclaimer, but in some ways it is a great example. Public institutions are defined by the general population, indirectly through their representatives creating the rules that govern them, and directly through contact with the public at large. Now if all our institutions still use this very outdated technology, and you can have trouble convincing them - during a global pandemic mind you - that using email is just as safe as using fax (so not safe at all basically), then that speaks to a larger mindset in the general population.

Many in the general public are also a lot quicker, some might even say careless, with adopting new technology of course. But as a society we are rather slow, and there are surprisingly many individuals who are hesitant or entirely resistant to adopting new technology. The fediverse usage is a bubble in a bubble here.

The internet infrastructure is another good example for this on the societal level, as there were plans in the 1980ies [!] to lay out a glass fibre network between every publicly used building in the country, which would have gotten us a good part of the way towards adopting this new material at scale. But in the end it was deemed unnecessary and too expensive and the project got canned (mixed in with rumours of “close friendship” between the chancellor and a major copper producer). Instead now we have people running around thirty years later and collecting signatures at the door for last-mile fibre network projects that seldom make quorum and thus almost never materialise public funding.

2. […] But also how are Germans technologically behind regarding common personal life?

I bet you wherever in Germany you are, if you go to the website of your local city government right now they will have a still active fax number in their contact information. I guarantee it. Well if they have a website that is.

Which is a bit silly as an example but highlights the central problem, which is that adoption of new technology happens at a glacial pace, especially in public institutions. There are many reasons for that of course, some good, like the aforementioned inclination towards privacy, some bad like whatever allows fax machines to still be around.

And don’t get me started on internet infrastructure… In an international comparison we certainly aren’t leading the field regarding adoption of new technologies.

Oh yeah, can’t use the same IP range as your LAN, that will lead to problems. :D Glad it’s fixed.

Out of curiosity, does forwarding work now without the output (-o) command in PostUp?

Like I said in another thread on this post, I’m pretty sure that’s because they are forwarding input but not output in the PostUp rules. Setting a /32 in AllowedIPs works fine for me.

What are you trying to say? That reply also shows AllowedIPs set to a /32 on the server side.

I don’t think that’s what the setting does. Anyway, I have them set to a /32 IP in my server config and it works nonetheless. I get full access to the /24 behind the server from the client.

You have ALL traffic being routed over Wireguard here.

Please correct me if I’m wrong, but isn’t it the other way around? All Wireguard traffic is forwarded to the local interface.

I think the problem might be your PostUp/PostDown lines have an in-interface (-i) but are missing an out-interface (-o) for the forwarding. Try this:

PostUp   = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o ens3 -j MASQUERADE
PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o ens3 -j MASQUERADE

I don’t think capitalism is necessarily at fault, nor must the working/middle classes be struggling for fascism to emerge. If anything, quite the opposite. It is the better off countries that end up turning fascist. All fascist countries are/were first world countries, in various states of advanced development.

That’s not right, at least not for the fascist regimes in Europe that emerged prior to WW2. The countries where it happened (specifically Germany/Italy/Spain) had all seen civil unrest or even civil war in the recent past, they were hit hard by the global financial crisis in the twenties and had high unemployment and widespread poverty. This was the very thing the fascists used to ingratiate themselves to the public at large, by creating jobs through massive public building and rearmament projects.

By the way “first world countries” is post-WW2 terminology and didn’t originally have a connotation of superior economic status, but was referring strictly to ideological alignment. Whether a country belonged to the capitalist/communist/unaligned block in international politics during the cold war.

The number of littered bottles, with or without a cap, is greater than the number of loose caps,

That smells like survivorship bias. Your dataset is skewed by loose caps being way harder to find due to being smaller. It stands to reason that all those bottles without a cap you find will have also had their cap littered in the vast majority of cases.

Linux users can’t even agree […] so how am I supposed to pick one with any confidence?

Easy. You make a post like the OP, count the positive mentions of distros in the comments, and bam, you have your distro of choice. It’s called the Linux newbie roulette and works kind of like the magic hat in Harry Potter that sorts you into your house.

For the unfamiliar: https://www.youtube.com/watch?v=TJYOkZz6Dck

(CW: gore, subtitles)

Not yet, but you probably will be able to in the future.

Right so WhatsApp and messenger are gatekeepers and they must allow interoperation with who anyone who wants to ie me running my own signal instance?

There are several stipulations on interoperability in the new regulation (Ctrl+F “interop”). To my understanding it is stipulated that they have to make interoperability possible for certain third parties, but how to go about this is not exactly specified on a technical level - meaning the specific way to implement this is left to the gatekeeper. So your Signal server may or may not be able to depending on how exactly they go about this.

They also need to interoperate with signal hence if a works with b and c works with a why wouldn’t b work with c?

No they need to enable interoperability period. Says nothing about Signal (the software) per se. Meta has announced they plan on implementing it based on the Signal protocol (not Signal messenger software, not Signal server software).

Cos if thats hoe it works or if im not allowed to interoperate with WhatsApp or messenger in the first place then this juat seems like its handing the monopoly away from the companies to the government and giving the people fuck all.

To my knowledge the aim of the regulation is exactly that, to allow anybody interoperability with these “core platform services”. The status quo is that the regulations has been announced by the EU, it has gone into effect, and Meta has announced how they will implement interoperability to comply. Once the implementation is available and then found lacking in regard to the regulation it would be up to the affected third party to sue Meta over it.

In Germany, Mein Kampf is banned except for educational purposes, eg in history class.

Strictly speaking this is incorrect, although the situation is somewhat complicated. There are laws that can be and were used to limit its redistribution (mainly the rule against anti-constitutional propaganda), but there are dissenting judgements saying original prints from before the end of WW2 cannot fall under this, since they are pre-constitutional. One particular reprint from 2018 has been classified as “liable to corrupt the young”, but to my knowledge this only means it cannot be publicly advertised.

What is interesting though is how distribution and reprinting was prevented historically, which is copyright. As Hitlers legal heir the state of Bavaria held the copyright until it expired in 2015 and simply didn’t grant license to anything except versions with scholarly commentary. But technically since then anybody can print and distribute new copies of the book. If this violates any law will then be determined on a case-by-case basis after the fact.

Not with Signal messenger, the company running it hasn’t been designated as a gatekeeper under the DMA rules. You can see which services will be affected on the Wiki page (only WhatsApp and Facebook Messenger currently).