It would be unwise for a bank to publish its exact fraud detection and risk management policies, otherwise they could be easily circumvented. A lot of these policies will be embodied in their internal backend services.

Someone will now inevitably mention “security by obscurity”. But Kerckhoff’s Principle is specifically about cryptosystems which should derive their security solely from the strength of the keys. That way, confidentiality is still ensured even when details about the cryptosystem become known to adversaries.

But non-cryptographic aspects of security benefit from asymmetric knowledge, from grey areas, from increasing risk for adversaries.

FYI https://privacytests.org/ gives a good browser privacy comparison. No affiliation and don’t know how correct the data is.

After that project was started, the author started working for Brave.

The data and tests seem good, but some aspects of the methodology are opinionated. For example, browsers are tested in their out of the box configuration, not in a configuration that a reasonably privacy-conscious user would select with a couple of clicks. Thus, a browser dedicated to blocking tracking (like Brave) gets a lot more checkmarks than a general audience browser like Firefox.

LibreWolf is essentially Firefox with all those privacy features pre-enabled.

In the language of Polandball comics, it means “give land/territory”.

“Gib” is taken from the German imperative for “give!”

Best theory is that “clay” as “land” originates from a bad machine translation.

It seems somene created a Wiki that covers these terms: https://www.polandballwiki.com/wiki/Terminology#Clay

You actually get a say in how that money is spent, whereas if you donate to developers directly then they decide …

You get to be involved in a “steering committee” of sorts for that project,

The project itself always decides, unless you fork the project and do your own thing. You can wave a carrot in front of them (if you do X then you get $Y), but the relevant factor is going to be the size of the carrot $Y, not directly the “collective bargaining” via that platform. How would your platform facilitate finding a stronger negotiation position?

this membership organization is incorporated as a non-profit, whereas the software project you’re supporting may not be

It sounds like you may have discovered the “fiscal sponsor” concept. There are a couple of nonprofits already offering such services, such as the Software Freedom Conservancy or OpenCollective. The foundations like Linux Foundation, Apache Foundation, or Eclipse Foundation also come to mind.

However, for all of these the project decides to join a host. Foundations can’t just annex projects.

Synology’s DSM has built-in MFA support, though it also has some features for external identity management. I don’t think Keycloak and so on would be compatible though.