Yes, projects backed by multi-billion dollar companies do tend to be more resistant to that kind of attack.

It wasn’t “easy” at all, they had to put in over 2 years of useful contributions before there was chance to insert the malware. If you’re worried just stay on an older version, it should still open new files perfectly fine.

To be fair, it does have the most potential to cause harm if you exclude every kind of fossil fuel. And hydroelectric. That said, there isn’t a chance in hell I’m going to protest fission if the only alternative is more coal/gas.

Do you use it for anything other than syncing code? Currently I’m using plain SSH sync for all my personal git repos, and I’m not sure if there’d be any advantage in switching to Forgejo.

It’s not too big of a leap

I think it is. I’d like to see at least one documented case of this happening before people start demanding that cars be able to move while plugged in. Plus, in the very scenario you describe, the car would still be able to move, no? Attaching a charger does nothing unless you’re changing to parked at every red light.

The only time you’d need to drive away while charging is if the attacker walks up while you’re sitting in your parked car, or kindly decides to let you get in before doing anything.

I can’t find a single instance of someone being unable to escape because of their charger, so maybe let’s worry about it if it ever becomes a problem.

I’m not against the idea, but I do think it’s a bit unfair. There are dozens of projects KDE relies on that never even get the chance to ask for donations this way, simply because they don’t need a GUI.

I believe KDE should at least offer to share the donations with other projects, projects that would otherwise have no voice. Something like the old Humble Bundle donation method would work really well, and let users to choose how their money is allocated.