⚠️ Just a reminder, folks:

The "container" movement on Linux emerged as a convenient way to manage different, possibly conflicting settings & dependencies for different apps on a machine. "Security" by sandboxing got tacked on later, and the quality of that isolation remains LOW regardless of all the trendy project names and acronyms that have filled that space.

Data centers' standard for high security consists of virtual machines (type 1 hypervisors) or separate dedicated hardware. Ain't no way, no how is a successful datacenter going to ask a giant, complex, contorted Linux or BSD (or hybrid Windows or Mac) kernel for sandboxing services to contain threats.

If you are using containers to enhance security – on any general-purpose machine – make sure they are running as VMs, or as sandboxes on a microkernel (not monolithic) architecture.
#infosec #security #containers #hypervisors #microkernel

Sorry, is this 👇 a healthy ecosystem? Where fedi posts on other instances only come through as a title + web link?? Someone thought that microblogging nodes couldn't handle an excerpt with thumbnails???

Even RSS gives the reader more.

#fedi #lemmy #mastodon

If this meme (pictured) were true, you might think Adobe is the most valuable company in the world, but the two major PC operating system brands are way ahead in value.

Its like how games coming to Linux were supposed to bring a huge rise in Linux desktop users, but that figure shifted no more than 2%.

So it is the same old delusion. Desktop Linux is really about spreading Unix neckbeard-ism to the masses, as that is the culture which produces its desktop environments – and makes sure that GUIs are never standardized. Some deny it, and when they do I say "So Linux actually won because of Android" and they come back with "No, not like that!"

Android coming out with a PC edition would be far more revolutionary than the "good" this meme is depicting.
#linux #desktoplinux #android #chromeos #adobe