frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Be Using Rootless Containers

https://blog.miguelgrinberg.com/post/you-should-be-using-rootless-containers
16•ibobev•1d ago

Comments

ma2kx•1d ago
In my opinion the biggest advantage of podman is that it uses pods with basically the same config and behavior as kubernetes does. As long as you just use podman pods instead (or possibly via) compose files you likely just notice that only the pod has one (and not any more) veth interface, that you reach other containers inside a pod via localhost:$port (instead of $service-name:$port) but when you switch later on to kubernetes you are already familiar with some basics.
orangea•12m ago
Why would an adversary being able to execute code as root on a personal computer be a bigger threat than their being able to execute code as non-root? Surely just about any of the stuff that a malicious hacker might want to do to someone's personal computer can be done without root... right?
HarlequinHair•4m ago
There are substantial differences.

For one, as non-root user you are tied to the permissions system and can't access most of the data. If one of your services (let's say sql) get hacked, they are tied to sql user, and unless the achieve privilege escalation, they can't mangle with other services data (eg webserver).

Also network wide, a non-root user can't use different protocol than tcp and udp. The only reason you can ping as a regular user is because of the setuid on the ping program, otherwise icmp is not allowed to non-root users.

There are of course other reasons, but these are some examples on how it would be different.

myaccountonhn•3m ago
I run all agents as a different user for this reason.
venussnatch•11m ago
>the one led by the racist, so it isn't getting a mention here

Are people really terminally online enough to understand this?

SoftTalker•7m ago
I don't know what he's referring to but I stopped reading at that sentence.

iPhone Duo

https://www.apple.com/iphone-duo/
988•thecosmicfrog•9h ago•1785 comments

Show HN: What if the speed of light was 5 km/h?

https://rivendell.dmitrybrant.com/relativity/
47•dmitrybrant•1h ago•29 comments

Shopify acquires Tailwind

https://tailwindcss.com/blog/tailwind-is-joining-shopify
927•EdwinHoksberg•14h ago•371 comments

What do Visa and Mastercard do? An intro to card networks

https://tautology.town/2026/06/01/card-networks.html
420•evakhoury•1d ago•239 comments

Growing proof that autonomous cars save lives

https://spectrum.ieee.org/are-self-driving-cars-safe
257•bookofjoe•10h ago•462 comments

Show HN: Compute polynomials twice as fast

https://thomasahle.com/fast-polynomials/
30•thomasahle•18h ago•9 comments

AirPods 5

https://www.apple.com/newsroom/2026/09/apple-introduces-airpods-5-with-best-in-class-open-ear-act...
399•awad•10h ago•320 comments

iPhone 18 Pro and iPhone 18 Pro Max

https://www.apple.com/newsroom/2026/09/apple-debuts-iphone-18-pro-and-iphone-18-pro-max/
306•meetpateltech•10h ago•332 comments

No Man's Sky Cosmos

https://www.nomanssky.com/cosmos-update/
318•Limb•12h ago•338 comments

GPT-6 Astra, looped transformers, and hidden reasoning

https://magazine.sebastianraschka.com/p/gpt-6-astra-looped-transformers-and
366•ModelForge•13h ago•128 comments

Training a 3.8B LLM to 0.384 CORE for $998 – Hugo Vergnes

https://hugovergnes.github.io/little-lm-3-8b/
8•Anon84•1h ago•1 comments

Factoring RSA 260

https://cognition.com/blog/factoring-rsa-260
52•samyok•7h ago•6 comments

Be Using Rootless Containers

https://blog.miguelgrinberg.com/post/you-should-be-using-rootless-containers
16•ibobev•1d ago•6 comments

Automattic's board forces CEO Matt Mullenweg into leave of absence

https://techcrunch.com/2026/09/09/automattics-board-forces-ceo-matt-mullenweg-into-leave-of-absence/
99•LeoPanthera•3h ago•126 comments

Desert Ant Labs: local, fast models that run on device

https://desertant.com/blog/introducing-desert-ant-labs/
413•willwhitedc•16h ago•93 comments

Aardman (Wallace and Gromit) Is Selling Its Original Movie Puppets

https://gizmodo.com/aardman-is-selling-its-original-movie-puppets-this-month-2000807968
15•Gaishan•3d ago•3 comments

Apple Watch Series 12

https://www.apple.com/newsroom/2026/09/introducing-apple-watch-series-12-with-the-all-new-health-...
231•Lealen•9h ago•277 comments

Qwen 3.8 follows GPT-5.5 Pro reasoning prefills

https://gist.github.com/wsxiaoys/e0286dc6bb624ff5fdf49e7f4c528ba3
188•wsxiaoys•10h ago•76 comments

Rivian's gambit for full autonomy

https://spectrum.ieee.org/rivian-self-driving
47•1970-01-01•1d ago•67 comments

A Stupid Idea for AI Alignment We Came with by Looking at Specification Gaming

https://slimemoldtimemold.com/2026/08/05/a-stupid-idea-for-ai-alignment-we-came-up-with-by-lookin...
9•cpeterso•1h ago•3 comments

GNU Radio in the browser

https://gnuradioworld.com/
181•kristianpaul•11h ago•23 comments

How I advertise malicious software on Google Ads

https://xlii.space/eng/malicious-software-on-google-ads/
367•xlii•16h ago•223 comments

The UN challenges five centuries of cartography

https://www.not-ship.com/united-nations-map/
58•speckx•11h ago•79 comments

The Kuycon P20 – 28" 4500x3000px 3:2 monitor

https://taoofmac.com/space/reviews/2026/09/06/1800
29•zdw•3d ago•22 comments

Seismic Isolation

https://www.ligo.caltech.edu/page/vibration-isolation
9•pillars•3d ago•0 comments

Understanding the recent DDoS attack against Read the Docs

https://about.readthedocs.com/blog/2026/09/2026-ddos-attack/
169•davidfischer•11h ago•57 comments

Planet Labs' open satellite feed

https://tech.marksblogg.com/planet-labs-open-satellite-feed.html
153•marklit•12h ago•27 comments

Use Vsock with Libzmq

https://blog.remijouan.net/posts/libzmq-vsock-pyzmq/
33•remijouannet•2d ago•3 comments

Blizzard Workers Win Historic Union Contract

https://www.gamespot.com/articles/blizzard-workers-win-historic-union-contract-that-could-set-a-n...
129•dbg31415•5h ago•41 comments

Bespoke: A programming language for people who say please

https://blog.hofstede.it/bespoke-a-programming-language-for-people-who-say-please/
143•birdculture•3d ago•32 comments