• 4 Posts
  • 301 Comments
Joined 2 years ago
cake
Cake day: April 27th, 2024

help-circle


  • The big difference for me is that “pro AI” is very different from “recognizing where AI is useful”.

    Can my little Intel B70 help me code faster? Yes. Super helpful.

    Can a cluster help analyze MRIs to catch things doctors don’t? Also yes.

    Can a giant data center replace writing 1MM easy emails while destroying the environment? Yes, but it probably shouldn’t.

    You can recognize value and the importance of regulation at the same time.








  • Soooo this is not really true unless you don’t trust your kernel. While a VM is more isolated from the host, since a container shares kernel space, that doesn’t make it less secure. I.E. isolation does not equal security.

    Actual sandbox escape vulnerabilities happen in VMs as frequently as they do in Docker, and while all VMs have a full systems that many exfiltrations can hit (due to a full suite of services running), many docker containers are locked to a user space with only one process running.

    @kureta@lemmy.ml if you are running separate Docker networks in compose, I would not recommend switching to VMs. If that kind of isolation is a requirement, add another server and use different SSH keys for it.