JLD

It is quite concerning, but I feel like those issues have a solution, if the tech moves out of those greedy bastards hands.

They just want to scale as fast as possible without any concerns for communities, energy, or water. That’s because they are running a completely unsustainable business and they need to spread quickly, to make more people depend on the tech, as provided by them, so that eventually they get government backing and become comparable to energy, as they have said before.

But it’s a fucking scam. We could run AI locally with less resources per area, so by distributing it the impact would be negligible compared to what massive data centers bring. I would actually love to see some numbers on this, but the ones funding it are the ones interested in building the data centers, and they have the government reach to keep them from doing a fair study as well.

The issue with AI is not the tech itself, but the people controlling it, so I definitely agree with you!

Owning a disc hasn’t been synonym with owning a game in a long time. And that was already an issue!

I should have just said that containers are, at the very least, a component in security. There’s this running argument that containers are not meant for security, but if we actually go back to jails in FreeBSD that’s not really the case, so we are in agreement. Isolation is their original goal. And I would argue that isolation is definitely a tool for security.

It’s true that containers were built for reproducibility rather than security, but it’s also true that they can be a helpful tool in securing an environment. Not the ONLY tool, but a helpful one, as they implement kernel namespaces, and, also, tools like podman give you easy access to seccomp-bpf as well. I’ve personally used containers as part of a sandbox for an AI agent, but I integrated quite a lot of security components apart from the container itself, including proper firewall rules on the host level, a landlock ruleset inside the container, a custom seccomp-bpf profile, DNS allowlisting to avoid DNS data exfiltration, and, of course, basic container hardening stuff, like setting the filesystem to read-only, or setting proper uid/gid mapping. There’s a lot you can do with it, but simply containerizing an application won’t secure it by default.

Always tired all the time. It’s a mystery how I can get up in the morning. So everything.