myersguy

An attacker escaping from a container can’t be system root as Podman runs rootless (without some other exploit or weak password).

That would be true of podman running anywhere, and is not unique to an immutable distribution.

The filesystem itself is also read-only.

You can change that real quick if you have root access.

Because even if an attacker could gain access even as root he cannot modify system files.

They 100% can.

The "down" was definitely edited after the fact.

Thanks! Not quite as wild as I was expecting (kind of surprised this was enough to push them to delete their account)

Do you have any sources for this?

The GitHub says they plan on adding other fediverse connections in the future.

What is PortProton doing that could increase performance? At the end of the day, won't this tool just set up a wineprefix for your game and then launch it using wine/proton, just like other tools of this nature?

Where can you find an N100 for $60 with 4GB of memory?

EDIT: Nvm, found the comment replying to this mentioning Radxa boards. Just found them the other day. Very interested.

Aren't most CPU's and chipsets proprietary? Not to mention all of the firmware blobs they require? What are some affordable, non-proprietary options?

Doesn't Kate have its own theme options?

As a user of Debian and Arch: I don't know how to feel

Thanks for the link! I was trying to figure out the Lunduke complaints (I don't know if I've ever heard of this guy before). This video did a solid job of catching me up.