I've found most of the differences to come not from the socket API, or the logical behavior, or CLI differences. But instead from assumptions Docker makes, that it's running rootful, when Podman will not (by default).
As such, most of the fixes for Podman/Docker incompatibilities is just addressing that assumption with a few extra flags on the Podman commands to change how the user namespace maps between the container and the host, etc etc.
I live moments away from this roundabout. It's confusing. Single-lane roundabouts are really straightforward. You're either clear to enter, or you're not.
Adding lanes makes it far more confusing. I consider myself, you know, pretty smart. Not stupid, at least.
But I almost sideswiped someone in this roundabout the other day. Years of driving experience gave me an intuition that the middle lane would not cross over the outer lane. E.x. a car in the inner lane would not pass through the outer lane (except at the very end). So when I saw an oncoming car in the inner lane I thoguht I was safe to enter the outer lane. Not so. The inner lane car was actually lane-changing to the outer lane (at the exact point I was about to enter the roundabout) in order to exit.
tl;dr - within the container, the exploit works, and elevates to root (uid 0) within the container - BUT because that namespace actually maps to uid 1000 (the user) outside the container, the escalation does not flow up to the host.
But… does this escape the container? If not (the author seems to indicate it does not) then does it matter if you are in Docker or rootless Podman, right, since the end result is always: you have elevated to root within the container. If the rest of the container filesystem isolation does its job, the end result is the same? Though I guess another chained exploit to escape the container would be worse in Docker? Do I have that right?
Not exactly. One can be charged with stalking, even though the offender only went to places in public that the victim also went to. If combined with a pattern of behavior that, in aggregate, infringes upon the rights of the target, it can become a crime.
The interesting part, for anyone who actually reads the article - the change was fixed in an RC and then reverted in the final release.
Which implies there was some regression, some issue, some incorrect behavior or negative impact. One has to wonder… what could it have been? What could the issue with having a more accurate clickbox for the corner of the window possibly be?
Given that the video is fully interactive and lets you move around (in a “world” if you will) I don’t think it’s a stretch to call it a world model. It must have at least some notion of physics, cause and effect, etc etc in order to achieve what it does.
I’m not sure about “dumb them down”, I suspect it’s more like “subtly influence popular opinion”.
My husbands TickTock feed is full of things like “10 things Americans do that Chinese think are weird”, “10 reasons Chinese cities are in the 22nd century” etc etc.
I personally don’t think that’s propaganda - most of it is factually true and would be pushed to the front of any fair algorithm because it is engaging. But I can kinda see the concern, even though I disagree with the outcome.
if (big if) you trust the execution environment, which is apparently auditable, and if (big if) you trust the TEE merkle hash used to sign the response is computer based on the TEE as claimed (and not a malicious actor spoofing a TEE that lives within an evil environment) and also if you trust the inference engine (vllm / sglanf, what have you) then I guess you can be confident the system is private.
Lots of ifs there, though. I do trust Moxie in terms of execution though. Doesn’t seem like the type of person to take half measures.
the ripgrep codebase is ultimate “pour a drink, settle into your coziest chair, and read some high quality software” codebase. Just click around through it and marvel.
I just started working with a new team a few weeks ago.
So far I've had "nice to meet you" calls with six or seven of the people on this team. And nearly half of them mentioned "by the way, I have ADHD, just so you know."
And since I share so many characteristics with these individuals, now _I'm_ wondering if I have ADHD. Certainly the never-ending Instagram ads want me to think so. Or is this becoming a blanket term for "I'm easily excited and a bit weird"?
Personally, I went almost my whole life with mild depression and didn't even know it - I just thought depression happened to other people, and that what I felt was normal. Then when a doctor gave me the questionnaire during a routine checkup and put me on SSRIs, it was basically life-changing.
Agreed, however after months of being "Linux only" (Manjaro KDE + Proton), just this weekend I broke and installed a Windows as a dual-boot option.
90% of games with Proton "just work" like you said. It is amazing.
But then there's that one game that doesn't work, or works but with half the fps... for me, it was Death Stranding. It runs at 60+ fps at 1440p on Windows, but runs at half that on Proton, with horrible artifacts/frametime on Linux + Proton (even the community mod "GloriousEggroll" Proton version).
If CyberPunk is any good, I'm going to buy it and want the best experience... for now, that probably means Windows, unless by some miracle it works on Proton with no issues.
As such, most of the fixes for Podman/Docker incompatibilities is just addressing that assumption with a few extra flags on the Podman commands to change how the user namespace maps between the container and the host, etc etc.