The majority of my services are sandboxed, the only real issues ive had is with anythat directly needs the docker socket. But tbh once you have a podman socket in pretty sure you can pretty much anything, the user account running podman can do.

I’m curious if they hardened their SE Linux, and I wonder what kernel bug was used and if its public. I know the recent batch of copy fail style exploits were patched. If these are zero days I fear the only way to accurately protect yourself is to run a full VM level hypervisor. And even then how long before we have zero days for hypervisor. I noticed C abd C++ applications seem more vulnerable so maybe moving to rust will help.

The E-Shitifcation begins , when will they add stories and reels

Can some teach the KIA Boys how to steal waymos and post it on tiktok

Unfortunately I only have until august otherwise I habe to go sleep on someone Couch, where my ex who hates me also lives

I feel like the end goal is us to be using thin client that can’t even browse the web, we will have a content slop scrolled in the middle, you swipe right and you have an AI chat box to search information, send messages, it all has to be done with AI. Oh and you need scan your ID and pay subscriptions for each AI feature you enable, you will own nothing and work all day you won’t have time to browse the web so the AI will do it for you

So much for free speech