• 0 Posts
  • 25 Comments
Joined 1 year ago
cake
Cake day: November 10th, 2023

help-circle








  • Can you verify the software running on an instance is the same as the one in the source code repository? You can’t. Can you verify the instance isn’t running code to read passwords from your login requests even if the code is the original open source code? You can’t.

    That’s why (and for other reasons) you should never use a password for more than one site/service/instance.

    Lemmy admins (admins in the Lemmy application) probably can’t read your password. But everyone with admin rights on the server operating system can.



  • The thing that confused me when first learning about docker was, that everybody compares it to a virtual machine. It’s not. Containers dont virtualize anything. They take a (single) process from the host OS and separate that into its own environment. All system calls, memory access, file writes etc are still handled by the same os (same kernel). However the process is separated both on the file system and process level. It can’t see other processes outside of the container and it also doesn’t see the real filesystem. It sees a filesystem provided by the container. This also means it sees different file and user permissions. When you run a alpine Linux docker container on an Ubuntu system, the container only containes the (few) files for alpine but no Linux kernel no desktop environment. A process inside that container only sees the alpine files and not the Ubuntu files. It also means all containers see a filesystem independent of each other and can use libraries and dependencies of different versions (they are only files after all).

    For administration it makes running complex services easy. You define how to setup that service (what base Linux distro to use, what packages to install, what commands to run, and how to start the process). You can then be save to assume the setup of that service did not interfere with the setup of any other service. “Service 1 needs a certain system wide config changed? Service 2 needs that config in the default state? And both need a different version of the same library?” In containers you can have all at the same time because they each see a different version of the same config and library.

    And all this is provided by the kernel itself. All docker does is provide an “easy” way to create and manage containers but could could do all of that using chroot, runc and a few other.

    As a note, containers usually don’t come with systemd as they don’t need an init system. You would run the service directly inside the container and then use systemd outside the container to make sure the container is started/restarted, or just docker as it can already do that.

    I found a great article demystifying containers recently





  • groet@feddit.detoFirefox@lemmy.mlWhy I use Firefox
    link
    fedilink
    arrow-up
    4
    ·
    8 months ago

    Chrome doesn’t care about closing html tags. If they are mising the document is invalid but chrome will render it anyway and just add the closing tag where it thinks it should be.

    At the other end, Firefox goes beyond the standard and will block certain connections that should be allowed by the fetch standard (the setting to disable that is called enhanced tracking protection).

    So chrome allows things things it shouldn’t while Firefox blocks some it shouldn’t


  • They sometimes buy keys using stolen credit cards. When the fraud is found out, the banks will request the money from the developer. They in turn often don’t have a way to lock the fraudulent key, so it remains valid.

    The costs for the initial bank transfer, plus the time invested in returning the money to the credit card holder are payed by the developer.

    The key reseller has a 100% profit margin, the customer has a valid and cheap game key, and the developer actually lost time and money.




  • Dnd5e leaves to many things up to the gm, like magic items and encounter balancing. CR is notoriously inaccurate and running level appropriate fights can easily end up as unwinnable deadly or just a trivial steamroll. Especially once higher lvl magic comes into play with save or suck spells (cough polymorph cough). Yes legendary resistance can fix that, but that is not the system being stable, it is the system giving you tools to fix its unstableness. And even then, the fight ends after X presses of the “I win” button instead of one.

    While there are a lot worse systems than dnd5e, when comparing it to pf2e it is objectively the system with more holes. No doubt, partly because pf2e could learn from dnds mistakes and is not produced by a company trying to milk its customers for every cent.


  • groet@feddit.detoRPGMemes @ttrpg.networkPathfinder vs linux
    link
    fedilink
    arrow-up
    36
    arrow-down
    1
    ·
    9 months ago

    have done something that broke everything

    When talking about dnd5e -> pf2e, I STRONGLY disagree. Pf2e is a much, much more stable and balanced system than DND and waaaay harder to break.

    With pf1e I agree. That system has so many busted builds.

    On the other hand the analogy is very good, as DND/windows is only considered to be “stable” and “intuitive” because it is the “Default” and usually the first thing people get in contact with. From an objective, unbiased perspective they can be very unintuitive.

    … And yes I play pf2e and use Linux how could you tell.