Yeah I saw that plugin a few years ago and it was not ready for production yet.
I am going a whole different route, but have the same motivation: get rid of docker and improve the security.
I will move from docker compose to Nomad. And I will also not use containers itself anymore. I want/need more security. You can achieve this with MicroVM (Firecracker). However, you would need to build those VM images yourself. But there is a solution to it. Kata-containers. They allow to deploy OCI compliant containers into seperate MicroVM’s. Then you have true isolation from the host kernel, while not losing much of start-up time.
Warning: heating earbuds batteries to over 300F also causes fires
Reading this tells me the author has absolutely 0 idea of how physics work and is nothing but a blogger of consumer grade equipment. People like that should refrain from trying to understand how science or scientists work.
Yeah, all good and nice, but as long as they are not part of all linux distributions, I will not use them. I need a ls because I know it is working on all machines that I use. Additionally, don’t forget that introducing new tools also introduces new attack surfaces, something you want to avoid on very important servers.
Yeah, I see your point. No use to repeat the same you can read in other comments or in those 274772 guides online. I was trying to imply to just generally harden ssh because then brute-force attempts should be no issue, unless you log everything and the disk space gets maxed out :D
"None of this is in any way normal," Matthew Green.
Exactly, Matthew. But they are normal in a fascist country. Remember, if you do not fight actively against it, you are part of it. Too many former Nazis came up with the excuse “But I was forced to” or “I didn’t know any of this”. Non of those arguments are valid. Fight against it. Leave the country. But giving interviews will not change it.
What’s up, buddy? Why the sudden silence? Or did you finally realize that “Signal security failure” was never something someone said and it was actually just something the author came up with?
All good. It’s just an unnecessary punch against Signal. Especially journalist rely heavily on it, so I don’t know what the intention was with this title.
Yeah I saw that plugin a few years ago and it was not ready for production yet.
I am going a whole different route, but have the same motivation: get rid of docker and improve the security.
I will move from docker compose to Nomad. And I will also not use containers itself anymore. I want/need more security. You can achieve this with MicroVM (Firecracker). However, you would need to build those VM images yourself. But there is a solution to it. Kata-containers. They allow to deploy OCI compliant containers into seperate MicroVM’s. Then you have true isolation from the host kernel, while not losing much of start-up time.