'I’ve met a bunch of hardware engineers and I’ve made a point about asking each of them how they feel about using a single chip for multiple users. This is, of course, the use case of the cloud. All of the hardware engineers either laugh or are horrified and the resounding reaction is “you’d be crazy to think hardware was ever intended to be used for isolating multiple users safely.”'
I have talked with a whole lot of people who told me basically: "I do not need to think about all this security. I will put my app into a container anyways." Sometimes it is pure neglect, but most of the time they are pressured into it by the team leads who will do everything to ship fast.
A reminder why blindly trusting technology is a bad thing: https://blog.trailofbits.com/2019/07/19/understanding-docker-container-escapes/
Isolating your processes by using docker (or similar techologies) is a neat thing but it does not exonerate you from implementing a solid security concept.
Trail of Bits recently completed a security assessment of Kubernetes,...Trail of Bits Blog
What is all this comodity with FaceApp?
Let's summarize the whole thing bluntly:
Let me ask you: Why are you upset?
Big shoutout for #hledger, plain text accounting which can save large fees over conventional accounting software. AND at same time create sustainable access to data, rapid corrections. The alias function for account coding is awesome. Also the include function to unify or consolidate different data files is just sweet. https://plaintextaccounting.org/ and https://hledger.org
Well great, looks like my mails getting flagged as spam by Google. I am hosting my own Mailserver. Any recommendations how to handle this? Is the Google postmaster program the way to go?
One thing I have to find out is: How do I get to run podman on Nico's? I think I might miss a symlink somewhere.
I have been running Nico's for a few days now and I am amazed by it. After tinkering with the main parts I am now in the process of:
Me: Go big or go home! Installs emacs
After a few errors in my configuration.nix i now have a base system with i3wm, firefox and thunderbird. So this is kind of a celebratory toot from my new system.
Going full atomic and reproducible on my notebook. Instead of Fedora Silverblue i am switching to nixOS. Wish me luck.
Time to build some containers
That strange moment when you start to relate to the lyrics of hardstyle songs
Morning read of all the blogs, news and webcomics I follow
Now I am kinda ready to work...
The swarm is running and unlimited in its capacity...
Time to fix up some notebooks.
So fucking tired. I just wanna sleep.
Going to work.