• 0 Posts
  • 45 Comments
Joined 2 years ago
cake
Cake day: October 11th, 2023

help-circle














  • Yeah, containerization does make it much easier to just throw away the base system and start fresh. This way, you don’t have to worry about possibly straying the recommended upgrade path and accidentally breaking something.

    More code adds complexity, complexity leads to more bugs, more bugs means more vulnerabilities. Virtualization takes a lot of code. With all this extra code, it is possible that you are actually expanding the attack surface instead.

    It is likely inconsequential for most people just running a couple personal services at home, but organizations are pretty frequently targeted by sophisticated attacks, where the consequences of a breach can be severe.

    Yes, many of these vulnerabilities are difficult to exploit, either requiring local access or the existence of another vulnerability to achieve local access.

    However, there also exists a massive market segment whose entire business model relies on selling local access to VM compute resources, cloud server providers. An attacker could simply rent a VM on a vulnerable platform to gain the needed local access, launch an attack on the host and thereby compromise the other guests on the same machine.

    There have been an incredible number of flaws found and fixed (for now) in the isolation provided by virtual machines. VMware had a spat of critical vulnerabilities in 2024.


  • Yes, it matters.

    Also, the actual isolation of container environments varies greatly, on a per container basis. Containers are far less isolated than virtual machines, and virtual machines are less isolated than separate hosts.

    Neither containers or VMs will will protect from attacks on the host, see regreSSHion. You may be able to limit access to your host by using containers or VMs, but container escapes and VM escapes are not impossible.

    There is much time and effort required to maintain each of these layers. With “stable” distros like Debian, It is often the responsibility of the distribution to provide fixes for the packages they provide.

    Given Debian as the example, you are relying on the Debian package maintainer and Debian security team to address vulnerabilities by manually backporting security patches from the current software version to whatever ancient (stable) version of the package is in use, which can take much time and effort.

    While Debian has a large community, it may be unwise to use a “stable” distro with few resources for maintaining packages.

    OTOH, bleeding edge distros like Arch get many of their patches directly from the original author as a new version release, placing a lower burden on package maintainers. However, rolling releases can be more vulnerable to supply chain attacks like the XZ backdoor due to their frequent updates.




  • the number of Americans who own 401(K) investments, which benefit from better stock index performance, has increased significantly in recent years

    This is the same as saying lots of Americans have bank accounts. The accounts could be empty.

    the US cooled inflation down to that level far faster than other Western economies (e.g. the UK and Eurozone)

    The US did not experience the same economic effects as the UK. The UK performed Brexit which raised the cost of goods by definition, and had their price of fuel skyrocket due to the effects of the Russia-Ukraine war. The US is not dependent on Russian oil.

    wage growth has actually outpaced inflation in recent years

    EDIT: Wages with respect to productivity have been stagnant since 1970, but today’s average worker produces far more value for their employer. Employers are not sharing their increased profits with their workers, who are making roughly the same as workers from 1970. So yes, workers got a very slight real increase in pay, but are still vastly underpaid.

    The inflation rate measures the price change of a basket of household goods

    No, it doesn’t. That’s the consumer price index.

    employers are more willing to be generous with pay raises when the economy is good. In short, people credit increases in wages to their own hard work but blame inflation on the Government.

    No, increased wages are not because bosses decided to be nice. Corporate profits reached records during the pandemic, paying more reduces profits. Unions and displays of labor activism in the US have expanded significantly in the past few years. People are demanding higher wages from their employers. The entire purpose of the Federal Reserve is to combat inflation. Action by the government is the only way to control inflation.

    Economists are not stupid.

    That’s debatable, but some are certainly self-serving.

    Tell me how high interest rates benefits those who have to borrow money for school, medical expenses, a car, or a first home.