• 3 Posts
  • 175 Comments
Joined 1 year ago
cake
Cake day: June 2nd, 2023

help-circle






  • Lemongrab@lemmy.onetoSelfhosted@lemmy.worldOS recommendations
    link
    fedilink
    English
    arrow-up
    10
    arrow-down
    1
    ·
    2 months ago

    Generally, I think it is better to use a general server OS like Debian or Fedora instead of something specialized like Proxmox or Unraid. That way you can always choose the way you want to use your server instead of being channeled into running it a specific way (especially if you ever change your mind).




  • Lemongrab@lemmy.onetoSelfhosted@lemmy.worldSecurity and docker
    link
    fedilink
    English
    arrow-up
    5
    arrow-down
    1
    ·
    2 months ago

    It is not speculation, it is reducing attack surface. Security is preemptive. Docker/Podman are not strong isolation solutions. Rare does not mean we shouldn’t protect against the chance of kernel vulnerabilities. The linux kernel around 30 million lines of code long and written in a memory unsafe language. Code isn’t safe just because we dont know the vulnerabilities, this is basic cybersec reasoning.


  • Lemongrab@lemmy.onetoSelfhosted@lemmy.worldSecurity and docker
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    1
    ·
    edit-2
    2 months ago

    Docker/Podman and LXC linux containers share the same kernel with the host machine. Root in the container is root period (in the case of rootfull containers). Even without root, much of the data on your machine is readable from any user. With a exploit to escape the container (which are common) the malicious program has root on the machine. This is a known attack vector against linux containers. VMs are much better for isolating untrusted software from the host OS.









  • Here is my explanation:

    Situation: User asks for gender inclusive language reasoning not everyone is male. Dev responds saying that the user is trying to advertise their personal politics in the project pull-request, suggesting that by personal politics they mean “inclusive pronouns”.

    Reason it is transphobic: Note the Dev does not mention cis women, they dont mention women at all (but it isn’t like women are accused of pushing an agenda related to inclusive language). It is heavily implied to be trans people because of the dogwhistle language. Trans people are the main targets who are accused by others of pushing an agenda when it relates to personal pronouns. At the very least it is male-centric, which apparently from the context of the PR was making some contributors uncomfortable. If the Dev had said, “I got other more important stuff to do, someone edit the text and request a merge”, no one would be talking about it. It was his immediate 0 to 100 response accusing the user of pushing a political agenda. They dont need to say the words “I am transphobic” to say something transphobic.