this post was submitted on 12 Jan 2025
1157 points (98.1% liked)
memes
10924 readers
3277 users here now
Community rules
1. Be civil
No trolling, bigotry or other insulting / annoying behaviour
2. No politics
This is non-politics community. For political memes please go to [email protected]
3. No recent reposts
Check for reposts when posting a meme, you can only repost after 1 month
4. No bots
No bots without the express approval of the mods or the admins
5. No Spam/Ads
No advertisements or spam. This is an instance rule and the only way to live.
Sister communities
- [email protected] : Star Trek memes, chat and shitposts
- [email protected] : Lemmy Shitposts, anything and everything goes.
- [email protected] : Linux themed memes
- [email protected] : for those who love comic stories.
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
It is moments like this where I wished docker didn't exist. Could have made some news headlines.
or
Could of'd made
Is this considered chaotic neutral
How dare you correct my high in the morning ass!
That being said, I made the edit. I bet it made the comment better.
My sincerest apologies for killing a delectable morning buzz, but my eye twitches due to my slight 'tism when I see the "should/could of" error.
It's not you. It's me.
I don't think you could of handled the correction any better
ducks
ಠ_ಠ *eye twitch intensifies*
(Sighs)
I wonder if this is a mistake only native speakers do, because I (as non native speaker) don't understand why anyone would mistake "of" for "have".
It's because when it's said aloud, many of us just truncate the "have" ('ve) and it sounds like "of". Then we go to type it and often type what we think it sounds like...
No problem man I understand. I accept your 'tism and hope you having a good day.
And if not take a hit 😎
This toke's for you!
I hope they are using more than just docker for isolation 😅 Each user should be running in a different VM for security.
I ask out of ignorance - Why is docker insufficient for isolation?
The short answer is that Docker (and other containerization technologies) share the Linux kernel with the host. The Linux kernel is very complicated and shouldn't be trusted to be vulnerability free. Exploitable bugs are regularly discovered in the Linux kernel (and Windows and Darwin). No serious companies separate different tenets with just container technology. Look at GCP, AWS, DigitalOcean... they all use hardware virtualization which is much simpler and much more likely to be secure (but even then bugs are found on occasion).
So in theory it is secure, but it is just too complex to rely on. I say that docker is good for "mostly trusted" isolation. Different organizations in the same companies, different software that isn't actively trying to be malicious. But shouldn't be used to separate different untrusted parties.
The only fuckers who are getting their own VM is enterprise lol. I can't imagine they give that much of a fuck about their average user.