valaramech

There’s nothing wrong with OCI Images. If you’re concerned about the security of Docker (which, imo, you should be) there are other container runtimes that don’t have its security tradeoffs (e.g. podman).

The short version is that the creators of this API are doing something more secure than what the client wants to do.

A reasonable analogy would be trying to access a building locked by a biometric scanner vs. a guard looking for a piece of paper with a password on it. In the first case, only people entered into the scanner can get in (this is the cookie scenario). In the second case, anyone with a piece of paper with the right password on it will be let in (this is the Bearer token scenario).

More technical version: the API is made more secure because the “HttpOnly” cookie - which, basically, means the cookie’s contents can’t be read with JavaScript in the browser - is used to hold the credentials the server is looking for.

By allowing a third party to access the application, this means you have to allow methods that can be set “client-side” (e.g. via JavaScript in a browser). The most common method is in the “Authorization” HTTP Header - headers are metadata sent along with a request, they include things like the page you’re coming from and cookies associated with the domain. A “Bearer” token is one of the methods specified by the “Authorization” header. It’s usually implemented via passing the authorization credentials prefixed with the word “Bearer” (hence the name) and, often, are static, password-like text.

Basically, because this header has to be settable by a script, that means an attacker/hacker could possibly inject malicious code to steal the tokens because they must, at some point, be accessible.

This misunderstands the premise. You cannot intuit someone’s subjective experience of reality because it is impossible for you to experience their experience of reality. You have only what they’re able to explain to you.

To come at this from the other direction, if a friend says to you “I’m having a good day” and does not appear obviously distressed, how could you judge the relative goodness of their day or if it was actually good at all?

Possibly controversial opinion, the left needs a Fox News. A station that just unapologetically pushes liberal talking points and pays newsworthiness the same lip service that Fox does. Fuck this holier than thou bullshit we’ve got going on; fight propaganda with better propaganda.

Getting repeatedly beaten in competitive multiplayer games is just kinda par for the course if you haven’t learned the meta, strategies, etc. If you lack game knowledge and your opponents have that game knowledge, you will mostly lose.

If winning in the game is the only way you find enjoyment in them, then those kinds of games require significant investments of time and energy to “git good”.

I say this as someone who is repeatedly shit on in every game of CoD I’ve ever played and will play in the future. That said, I don’t gain particular enjoyment from winning alone - not that it isn’t fun to win, just that I get just as much enjoyment from other aspects of the game.

It sounds to me, mostly, that these games just don’t really appeal to your idea of what’s fun.

Parade raining time: https://feddit.de/comment/3373323

1. I believe flags are sorted alphabetically by how they are internally represented. All flags are a combination of two special letter-symbols. For the UK flag, these two symbols are “GB”, therefore the UK flag should be much earlier.
2. 🇺🇸 (Flag of the USA [code: US]) ≠ 🇺🇲 (Flag of the US Outlying Islands [code: UM])

Yes, the first US flag, which most people pick, is actually the flag of the US Outlying Islands. Whenever you see someone use the US flag emoji, check whether they accidentally used the " wrong" one.

Yes, that is how it works. Lockheed Martin isn’t a governmental body within the United States and is not bound by our Constitution in any way.

Regardless of our opinions on the matter, those are both private companies with their own rights that are not bound like a government under our current laws. People forget that because “corporations are people” they also get Constitutional protections. Our rights end where their rights start and vice versa.