Of course there is no public evidence. It's just a very probable speculation that governments want to control the internet.
Back in the days of newspapers/radio/tv, governments had control as they could easily go after news outlets.
However, with internet, they lost this power. They have been trying hard to regain the power of controlling information. The latest success was masking moderation as child protection.
An important detail that is missing here is how deallocation works.
When an application tells the system that it no longer needs a chunk of memory, the system does not erase the data from that region. It instead allows other applications to take control of that chunk.
Imagine it like renting a room, but you keep a copy of the key before checking out. You have supposedly left the room, but you still have access to it.
In the software world, this is unintentional behavior. In the real world, it would look like you accidentally return to that room.
Or, like you checkout, but your friend still has a key. Without knowing that you checked out, they return to take a bath. If a 3rd person knows about this miscommunication, they can rent that room, and steal your friend's money during the bath.
I used to watch The Hated One, who has also made similar recommendations for strikes. He has suggested the use of Briar, as it can fallback to Bluetooth connectivity.
However, I mostly wanted to point out that burner phones is not the answer for everyone. People need to be familiar with their local laws to stay safe.
Finally! Someone said it! My company changed my work laptop to a Mac. It's been a couple of months, and I still haven't got used to the desktop environment. Navigating between open windows with regular mouse/keyboard is a pain.
I find window grouping very annoying (this is also true for Gnome). What makes it even worse, is that the tilde is next to the left shift, instead of being above Tab. I think that's because we have British keyboard.
Your therapist can't even have a phone in the room?
I would prefer my psychological issues to not be turned into marketing campaigns. If you still don't understand what I am talking about, you should probably check the Privacy Policy of Google and Meta.
To save you some time: Google and Meta are monitoring the conversations using the device's microphone, to better understand what products you may be interested in. You have noticed, that ads are often related to the topics that you discuss face to face.
I had visited an ophthalmologist who used Apple Notes to keep track of his patients. He had no idea about the privacy implications of his choices.
However, my most nerve racking experience was talking to my therapist, while their stock Android was right next to them. Even when I mentioned my privacy concerns, they didn't bother to get rid of it.
Don't such satellites have a major flaw, that they revolve? Considering that earth is spherical, those satellites can only monitor some half of the earth each moment, given their sensors have such high FOV.
It's the first time I see the concept of bootstrappability in the context of security.
Is it really worth the effort?
There are multiple ways to run a supply chain attack. With bootstrappability, one can be sure that the compiler is trusted, but what about the code that the compiler compiles? There was this recent attack to XZ utils, which shows that more attention is needed on the code being merged and compiled.
I think that this just creates a false sense of security.
Contrary to that, I had read about a BSD team (I think FreeBSD) that reviews all the code before each release. This way they have achieved ~5 RCE exploits throughout their entire history.
I don't have any experience with guix, so I will not express any opinions towards that.
However, regarding NixOS:
Yes, as a person with experience in the Nix language, I can confirm it's awful
The documentation of NixOS is a known issue, and there are currently efforts to improve it
Talking about the trustability of binaries, by doing a quick search, I read that Guix builds are reproducible. This is true for NixOS as well. All upstreamed packages must have their version and the hash of the code (or artifact), to allow verification
The community of NixOS is opting to maintaining flakes, because:
Some applications can simply not be built following the Nix guidelines. Examples are some electron apps (like Falkor) and apps that have weird toolchains (like bubblejail)
The reviewing process takes way too long, and PRs for upstreaming are often ignored. This forces a lot of people to just PR a flake.nix to the application, or maintain their own overlays (overlays are like overriding the available packages, while flakes are more like distributing Nix code in general)
Are you at your place?