ones_and_zeros

Rather not say. Yea building and then running containers where users get to pick the base image is a risk.

We found that privileged is a pretty big hammer and thought we needed it too but we found ways to give us the functionality we needed without all the extra stuff we didn't need the privileged brings in.

Container break outs are rare and they typically require the attacker being able to control either the container creation parameters and/or the actual image being run. If you control those things and apply process isolation best practices (seccomp, cap drops, etc) then you are in pretty good shape.

Source: ran a container based RCE service that ran millions of arbitrary workloads per month. We had sophisticated network and system anomaly detection, high priced pentesters etc and never had a breakout.

In MA you are paying through the nose on labor to install though. That rebate evaporates pretty quickly, still a 5 figure job.

I just looked at the Chicago to Boston train and it's 22 hours long? That seems...lengthy?

I live on a very busy road that sees >15,000 vehicles/day, including 18 wheelers, dump trucks, busses, tankers etc. It is noisy (nevermind the air pollution) from 5:30 AM to 10:30 PM and I don't think local officials really appreciate it. I'd like to capture data, I'd even pay for it, but all of the "sound level" measuring devices are all junky and don't give accurate readings and don't store the data really well. I'm happy to pay for the right device or even better some certified service that can take measurements and create reports but I'm lost here. Any advice?

How is atheism not a positive belief system? And why is a positive belief system the answer?

Based on my evaluation that Trump only does things to further his agenda of sowing distrust in institutions and not out of any sense of justice or progress, here is my take:

He is forcing Assange to say "I will not reveal my sources as I am a journalist". Trump then gets to say he tried. The "media", especially any real journalists that take their profession seriously, will provide analysis that Assange is right for refusing. This gives Trump another opening to smear the media by portraying them as pro Assange, pro hacking and anti DNC.

Immigration is good for innovation, the H1B system is not. This administrations rollout of the suspension is cruel, which is the point. H1B Reform/Replacement is needed, the status quo is not.

Yes those salary survey's are just a way for businesses to enhance the information asymmetry in negotiations.

I think if software engineers ever decide to collectively bargain, and they want to include comp as an area to bargain on, the easiest thing to do is buy these same datasets and share with members.

It's not about where you live. It's supply and demand. Those companies artificially limited their supply and provided a ton of demand within their narrow market. They are now opening up to new markets and spreading out the demand accordingly.

Forced analogy time: It's like if I decide I'll only buy peaches from the organic farm down the road. They charge $20/lb. I calculate that I get $21/lb worth of utility. The Farmer is happy.

A few years later I decide that purchasing organic peaches online for $15/lb fits the bill, and utility dropped slightly to $19/lb but still better in comparison. The farmer is no longer happy.

This is really well done. Really appreciate the Pulumi output option.

If we wanted to support vpc peering between accounts, is it a matter of copy paste?

I had a neighbor in Boston a few years ago that was in the inner circle of the Lyman family. They had "real" jobs, etc but still definitely operated on the outskirts of society and the law. Didn't make great neighbors...