? Yes? Toomuchtodo is reminding the author (and other commenters), that github gists are one way to make sure secrets are secured / remediated before making a public post like this. Maybe not the most responsible whitehat action, but I can see it being useful in some cases where outreach is impractical / has failed.

Unfortunately, it doesn't look like Algolia has implemented this

when your startup is three employees and only one technical? this person created their AWS root account, I think it's fair to assume that he's their first engineer and probably first employee

Board members of a nonprofit are subject to external supervision, including auditing, regulators and—in extreme cases—lawsuits. The Supreme Court is unique because it is the court of last resort for the entire United States—even a state supreme court justice would be able to have their recusal decisions reviewed by a higher court, much less a random board member of a nonprofit.

What government programs in the US are stably funding open-source developers? I think most government-funded open source projects are very gunshy about looking for new funding because of the Trump administration completely politicizing grants and funding. I would not want to have to sign an anti-BDS pledge to get my open source project funded, and I would imagine that goes for many people in the community. Also, what "dismissive comments" are you referring to? The only one I saw was "Government support won't work for OSS at scale — it's too globally decentralized". Which is a fair criticism—open source projects are incredibly globalized, and getting e.g. New York State to fund an open source project that has contributors from Ukraine, India and China is a headache I don't think anyone would want to try and go through. There's just no benefit to the state administrators to fund that kind of project—they want to support parochial, home-grown projects with local ties.

Do you have more details? The thread you linked was about gzip, not dd.