Pretty sure he’s confusing it with either SFP+ or SFP28.
OSFP is the current bleeding edge with 400Gb/s of bandwidth. The current primary use case for that is ISP networks or running datacenter scale computing. The going prices for a PCIE card seems to be about 2k and around 600 for a DAC-Cable alone… compared to this 200$ mini PC, OSPF is in a completely different customer segment.
What do you mean by expensive? It’s free open source software no?
That doesn’t match my experience with AUR at all. Usually it pulls a specific git revision and checks the hash. This also ensures that the build shouldn’t suddenly fail to some extent.
Though it’s entirely possible that it’s not like this for all packages, though I find it kind of counterintuitive since your package manager wouldn’t know when to perform an update in this case.
That’s not necessarily very easy. These certs would have to show up in public certificate transparancy logs for most browsers to accept them. If this happens on a government scale it would surely get noticed, though the question remains what you’re left to do if the government forces it anyways…
See https://en.m.wikipedia.org/wiki/Certificate_Transparency section “Mandatory certificate transparency”