pull down to refresh
Exposing privileged ports and other stuff is covered here: https://docs.docker.com/engine/security/rootless/tips/#exposing-privileged-ports
Taxation is theft. Owning slaves is not ok. Whatever the law says does not change if something is morally permissible or not.
The story is interesting I appreciate you sharing it. But I'm surprised this is shared as something to be "proud" of.
By default the Docker daemon runs as root. And if you add a regular user to the docker group, it can then basically gain root access to system. Or if there's a 0-day in the daemon that allows for "scaping" from a container, the exploiter is now root in the host.
More detailed reference: https://wiki.archlinux.org/title/Firefox/Tweaks
A software passkey you can copy. Or even store it in a self hosted or cloud based password manager, such as Bitwarden.
A passkey is in summary a private key, so sure you can copy it as many times as you want. But you don't risk getting it stolen while using it because you don't send it for authentication, you just send a message signed by it.
This is how Bitcoin or Nostr work. And same way there are software and hardware wallets for storing Bitcoin private keys, there are hardware passkey devices implementing different standards such as FIDO2.
You can set up multiple passkeys for an account, so that losing access to one of them does not lock you out of the account.
It's clearly a good idea. Nice to see that the world is moving towards trustless and secure authentication as in Bitcoin.