There is a famous experiment , where a person gets 100$, and have to offer an arbitrary percentage of that to a stranger. If the stranger declines, both get nothing.

From the strangers perspective, getting offered even 1$ is a win, but the vast majority rejected anything below 30%

If you want any system to connect to you, you need to open a port. You don’t need to do that for outgoing connections (the OS and your router will automatically open ports for the return connection). So if everybody connects to one central system, nobody needs to (explicitly) open any ports (except for the central connection point)

Most VPNs use UDP. So set up a wireguard, tailscale or openvpn.

But you still need to “open up the firewall”. UDP still works on ports the same way as TCP. I do agree however, that exposing a VPN port is more secure than exposing a port for a game server, as you don’t know about the security of that server software.

The thing that confused me when first learning about docker was, that everybody compares it to a virtual machine. It’s not. Containers dont virtualize anything. They take a (single) process from the host OS and separate that into its own environment. All system calls, memory access, file writes etc are still handled by the same os (same kernel). However the process is separated both on the file system and process level. It can’t see other processes outside of the container and it also doesn’t see the real filesystem. It sees a filesystem provided by the container. This also means it sees different file and user permissions. When you run a alpine Linux docker container on an Ubuntu system, the container only containes the (few) files for alpine but no Linux kernel no desktop environment. A process inside that container only sees the alpine files and not the Ubuntu files. It also means all containers see a filesystem independent of each other and can use libraries and dependencies of different versions (they are only files after all).

For administration it makes running complex services easy. You define how to setup that service (what base Linux distro to use, what packages to install, what commands to run, and how to start the process). You can then be save to assume the setup of that service did not interfere with the setup of any other service. “Service 1 needs a certain system wide config changed? Service 2 needs that config in the default state? And both need a different version of the same library?” In containers you can have all at the same time because they each see a different version of the same config and library.

And all this is provided by the kernel itself. All docker does is provide an “easy” way to create and manage containers but could could do all of that using chroot, runc and a few other.

As a note, containers usually don’t come with systemd as they don’t need an init system. You would run the service directly inside the container and then use systemd outside the container to make sure the container is started/restarted, or just docker as it can already do that.

I found a great article demystifying containers recently

Yeah forgot about that.

But he didn’t while he “defeated” the daughter of ungoliant…

But he did have eärendils light… and a sword from gondolin…

Glorfindel: am I a joke to you?

Also easy to be a badass when you have incredible power, magic and weapons. Sam did it with a iron pan and a bag of dirt!

Honestly it might be the best Star wars movie, period. At least from todays perspective. The original trilogy was groundbreaking for their own time but haven’t aged the best. As with many media, what was innovative 40 years ago is cliche and stale today.

They sometimes buy keys using stolen credit cards. When the fraud is found out, the banks will request the money from the developer. They in turn often don’t have a way to lock the fraudulent key, so it remains valid.

The costs for the initial bank transfer, plus the time invested in returning the money to the credit card holder are payed by the developer.

The key reseller has a 100% profit margin, the customer has a valid and cheap game key, and the developer actually lost time and money.

The cells of your body are part of you. They share the same DNA and descend from the same cell (the fertilized egg) and depend on each other to stay alive. However there are more gut bacteria inside of you than there are cells of yourself (they are a lot smaller than human cells). And they are not related to you. So you could reincarnate as a gut bacteria of somebody else

its a lot more readable if you replace the : with any other function name

fork() {
     fork | fork &
};
fork

define a funktion called fork, which calls itself twice (call once, pipe ( “|” ) the result to the same function again which is run in a new thread in the background ( “&” )). Then call the newly defined function. The : is used to make it look more like emoji.

Schlechtere Angebote sind natürlich ein Weg ein Verhalten zu unterdrücken um damit ein Problem “zu lösen”. Aber dann fahren die Leute halt mit dem Auto oder versauern in der Stadt. Also ist das problem nur verschoben. Stattdessen besserer service wäre viel zielführender. Fahrradmitnahme fördern, Kapazität erhöhen (z.b. ein Fahrrad Wagon zu Stoßzeiten, etc). Reservierung für Fahrräder erzwingen kann sinnvoll sein, aber nur solange die allgemeine Kapazität ausreicht (und durch die Reservierungen etwas die Spitzenlast verteilt wird).

That’s what I wxpect. But with one more layer. In the end it’s going to be system32/elevator.exe which is called by Invoke-Elevation in ps which is aliased to sudo.

It’s supposed to be available in cmd and batch so it must be callable directly

There are plenty wild animals in large cities. Foxes, rabits, racoons … Berlin famously has a large boar population. Having a more human friendly city with green tram lines and less car traffic will surely increase animal populations. However I doubt it would be a problem that isn’t easily solvable or is still preferable to the current situation.

I always assumed the word coke is derived from coca(-cola)