IMHO, security updates are more important than OS updates, and Fairphone is good in that regard. I’d be hard-pressed to even name a killer feature from the last few versions of Android (or iOS, for that matter).

Given the 2.5Gb port also supports PoE in, I think the idea is that you can plug this into a 2.5Gb PoE port on a seperate managed switch and that’s the only connection you need; that’s certainly how I would use it. WAN connections could be plugged into that switch, along with the APs, user devices, servers, etc, with them seperated using VLANs. Assuming everything was gigabit except for that 2.5Gb link to the OpenWRT Thing™, you’d be hard-pressed to saturate that 2.5Gb port and you’d still have the gigabit port completely free for… whatever.

I think you might have missed the point: with a managed switch that 2.5Gb port can be used to handle multiple WAN and LAN connections simultaenously. My home network includes two WANs and six LANs split purely by VLAN tagging and that 2.5Gb connection should handle all of them just fine.

It’s full duplex so it’s 2.5Gb each way simultaneosly. Most NICs support half-duplex but I don’t know of any good reason to use that. I used to have a BananaPi based router that could comfortably saturate it’s gigiabit interface. I assume there’s some kind of offloading going on.

Most of those run OpenWrt or PfSense. Assuming the hardware is well-supported by the open source software it runs, there’s a argument to be made that there’s no difference. There’s always the risk of them using some weird chipset that won’t be supported in a year’s time. The only difference is that the OpenWrt One is specifically designed for OpenWrt with well-supported hardware.

I also wanted to chime in with the perennial point that while this device is a pure expression of the OpenWrt project, they also support hundreds of other devices including, amazingly, a number of large switches, so if you wanted to ditch the separate route appliance altogether you could get all the features with only switch hardware.

Exactly this. With VLAN tagging you can plug that single 2.5Gb connection into a 48-port managed switch and effectively have up to 47 different NICs if that’s what floats your boat. They’d all share the 2.5Gb but that’s still more than a lot of small networks need.

The LAN and WAN ports aren’t labelled as such on the device and can be configured to do anything. The 2.5Gb port can also be used to take in PoE so for a lot of people - myself included - this will be the only port that’s actually used, or at least the port that will be used the heaviest. The reason, I think, that it’s configured as WAN by default is so that the LAN port can be used to plug a laptop in directly without disconnecting the whole network.

Devices should be flexible.

Agreed. It’s a pity, then, that no-one has invented a single port that can replace USB-A, DisplayPort, HDMI, propriatary power connectors, Thunderb… oh… wait…

The USB4 protocol can handle 160Gb/s split asymettrically (so, say, 120Gb/s out, 40Gb/s in), wheras the upper limit for DisplayPort’s highest bandwidth mode, Quad UHBR 20, is 80Gb/s in one direction. So you can saturate your DisplayPort 2.0 quad-channel with more than enough bandwidth to power three 10K 60Hz 30-bit (i.e. very high-end) monitors in DSC mode, and still only be using half the bandwidth of USB4, all using a single cable which I can also use to charge my earphones.

I know, right? Why deal with Problem X when Problem Y also exists?

Good, thanks. You?

Good, thanks. You?

Good, thanks. You?

Good, thanks. You?

If you’ve got a spare quarter-hour, take a listen to the disquiet all those gifts can cause.

WFM. Looks like you’re using Let’s Encrypt, which is fine, and everything seems to be consistent. I think you’re good.

<Sips licence like a fine wine served at a dinner party.> Ah, yes, GPLv3, exquisite choice.

I don’t know why but I thought they were some special inaccessible computers.

It’s their marketing. Marketing, marketing, bullshit and marketing. Macs get viruses, Macs have vulnerabilities, Macs crash. Doesn’t matter how much their indoctrinated fans might claim otherwise, Macs are just weird PCs. In that context, their refusal to allow their owners to control them is all the more jarring and makes owning the older models like you mentioned all the more sensible.

“Federation” is like “non-fungible token”. Everyone knows what it is, but they’ve never heard it called that.

For locked-down devices, they’ll be running LTSC or LTSB editions (Long-Term Support Channel/Branch), or Windows Embedded, which are simplified and heavily customisable versions of Windows. For general-purpose devices, they’ll be using Pro or Enterprise versions of Windows which, crucially, support Group Policy. Using GP it is very, very easy for a single admin to configure an arbitrarily large number of Windows machines to work exactly how they want them to work, including configuration options that aren’t otherwise exposed to the end user in any way.

Edit: just to add: the lack of an equivalent of Group Policy is what is preventing Linux becoming widespread in businesses. If you think you know of a service for Linux that works like Group Policy, then you don’t know Group Policy.

winget install -e --id Mozilla.Firefox --accept-package-agreements already works prefectly.

Can you raise both your arms above your head? Do you smell burnt toast?