Soooo this is not really true unless you don't trust your kernel. While a VM is more isolated from the host, since a container shares kernel space, that doesn't make it less secure. I.E. isolation does not equal security.
Actual sandbox escape vulnerabilities happen in VMs as frequently as they do in Docker, and while all VMs have a full systems that many exfiltrations can hit (due to a full suite of services running), many docker containers are locked to a user space with only one process running.
@kureta@lemmy.ml if you are running separate Docker networks in compose, I would not recommend switching to VMs. If that kind of isolation is a requirement, add another server and use different SSH keys for it.
According to the law offices of Ned Barnett, Texas law prevents registered sex offenders from working in places frequented by children, including schools, daycare centers and playgrounds or attending school events like sports games.
Oh yes, I skipped that part. Railway specifically explains their solutions are self-managed. If they were doing pgdumps to the same volume, that's on them.
If Railway loses business over this, they may have a libel claim. They'd never do it, but it wouldn't be invalid.
As others have said, prediction markets are not the stock market, there is no insider trading. Insider information makes the market more accurate. It's external places, like the military, that may or may not have rules.
Want to know why it's not regulated? Look at the board for the two biggest players.
Not so random question: does the US have laws forbidding a senator or other federal official from accepting a direct invite to something like this without approval?
I.E. if the invitation was extended to someone who would support the initiative, even if not approved by the administration?
The PocketOS boss puts greater blame on Railway’s architecture than on the deranged AI agent for the database’s irretrievable destruction. Briefly, the cloud provider's API allows for destructive action without confirmation, it stores backups on the same volume as the source data, and “wiping a volume deletes all backups.” Crane also points out that CLI tokens have blanket permissions across environments.