“VPNs verbieten” Lustig wirds genau dann wenn die nicht beachten dass es halt auch VPNs für Home Office und so braucht 😆

Technically the truth. For everything there is a human who is the best at it. Although they might not know it.

I thought that cars are only able to drive on the street and was baffled when we saw an offroad rally on the TV

Die IG Metall hat doch eh schon die 35 Stunden Woche in ihren Verträgen. Es ist also lediglich die Verkürzung der Wochenarbeitszeit um 3 Stunden im Gespräch.

In other News: Knorr Bremse hat neulich seine Wochenarbeitszeit auf 40 Stunden reduziert. Offenbar gibts noch Unternehmen die mit ner 42 Stunden Woche unterwegs sind. Merkwürdigerweise sind da die 2 Stunden weniger kein Problem.

So what?

There are some.

The Death Planet ih the new trilogy destroyed the exact same way as Luke destroyed the Death Star.

The fact that they realized that “parsec” is a length unit, and they came up with a total bullshit explanation for “doing the Kessel run in 12 parsec”.

Nearly every maintenance infrastructure built like a giant death trap. The reactor room where Maul killed Qui-Gon, the scene where Luke realizes that Vader is his father, and so on.

Hashtag Behördenversagen im Ahrtal. Halte ich jetzt nicht für unmöglich.

Apple App store. Nearly every app has in-app-purchases. Just charge me upfront ffs

Es ist so gut wie unmöglich. Um eine lethale Dosis zu schaffen musst du 400kg Weed in 15 Minuten wegbuffen.

Meld dich nochmal wenn du die 4 Millionen Taler Straßenpreis beisammen hast, dann schauen wir weiter.

Schau in den Gesetzentwurf. Da wird das afair erwähnt

Naja, leider erlaubt das Gesetz nicht die Abgabe von Edibles

I mostly know what they do for a living. I am not really sure how old they are or what are their birthdays. But it simply isnt relevant.

I had my bachelor’s party weekend last weekend, and my best man rented an airbnb. We were 9 guys and some of them did not know each other before. Doesnt matter, we had beer and a great time. I think, such details really dont matter, if not for small talk.

Einfach blickkontakt halten und zunicken.

My wife has one. She gets weird looks in the office since we only have one. Both of us have bikes, she also has a motorbike. Always the right tool for the job.

Not really. The other one.

Cyka B blyat!

CS?

There’s a german stoner movie called Lammbock which covers exactly this scenario. Check it out if you can.

Sekundiert. Unsere Katze war nicht krankenversichert und bekam HCM (krankhafte Herzvergrößerung die in einem Feedback Loop und Kreislaufproblemen mündet). Als sie dadurch ne Thrombose bekam haben wir sie selbstverständlich in ne Tierklinik gesteckt und für die halbe Woche 2500€ bezahlt.

Sie hat dann noch ein Vierteljahr weiter gelebt. Uns war klar dass viele andere Besitzer vermutlich sofort die Spritze gewählt hätten, aber das war nie eine Option für uns.

But it’s the stuff which is used in nuclear power plants to store the used rods.

Indeed. Sure, they have these features, but only if used correctly while introducing vast more complexity (especially when being executed in a k8s environment,but also executed in plain docker). But, you know what also has security when used correctly? Plain linux.

What about 90% of all images on docker hub executing their main payload as root? What about many images bundling unnecessary software like an init system? What about the fact that even if you rm something in a dockerfile, it is still present, if you execute the rm in a different RUN command? What about every user in the docker group being implicit root on the host since they simply can mount the host’s / inside their container? What about the reusing of layers between images like it is even intended?

Doesnt sound like a security tool, does it? Sure, it feels a bit like one, but it was never intended to be one, but a dependency and environment bundling tool which happens to use certain linux APIs which can be used for security. But it wraps lots of abstraction around it.

If you want to use these features for security, access them manually. But, OP said they are kind of a noob. Telling them to just use containers is dangerous and leads to false assumptions.

Source: i work as a cloud/container/devops/k8s expert for over 5 years.