Edit: This is the kind of service that you should only expose to your intranet, i.e. a network that is protected through wireguard. NEVER expose this publicly, even if you don't have admin:admin credtials.
I actually didn't know I had. At the time I didn't properly know how docker networking worked and I exposed redis to the host so my other containers could access it. And then since this was on a VPS with a dedicated IP, this made it exposed to the whole internet.
I now know better, but there are still a million other pitfalls to fall in to if you are not a full time system admin. So I prefer to just put it all behind a VPN and know that it's safe.
> but there are still a million other pitfalls to fall in to if you are not a full time system admin.
Pro tip: After you configure a new service, review the output of ss -tulpn. This will tell you what ports are open. You should know exactly what each line represents, especially those that bind on 0.0.0.0 or [::] or other public addresses.
The pitfall that you mentioned (Docker automatically punching a hole in the firewall for the services that it manages when an interface isn't specified) is discoverable this way.
LSD is a powder/crystal (a salt). People just don't consume opioids orally, usually. There's something similar though: skin patches, since (other than LSD) fentanyl can be absorbed through the skin.
In context, we're talking about pills cut with fentanyl, in which case it is often consumed orally, mixed in at a very small concentration compared to the other ingredients.
Powedered drugs like cocaine mixed with fentanyl are even more horrible, since there is absolutely nothing to keep the concentration of fentanyl homogeneous throughout as it is handled.
Because now you're required to list all of your handles on any social media you had in the last 5 years and any email you used in the last 10.
This applies even for visa waiver countries as of 2026.
This makes me nervous because I have been critical of the US on some topics regarding the news or geopolitics (e.g. the recent events in Venezuela).
But even admitting the us is a sane country protecting the right to speech, there are 0 chances I remember all my emails (I don't even remember all the clients I worked with but gave me an email) or reddit/forum accounts.
The Canadian ones have to deal with Americans that don't realize the second amendment doesn't excuse forgetting there are firearms in your vehicle
That's why the American side presumably has "Don't forget about your guns" signs, while I can vouch for the Canadian side having "Don't forget pot isn't legal down there" signs.
The former is much more dangerous to officers than the latter, and justifies a more aggressive response IMO
"you must block things in germany after it goes through a formal government process" versus "you must block things globally even for places not subject to italian law because an italian media company doesn't like it"
There's more than a subtle difference betweeen the two.
I'm in Germany and Cloudflare DNS doesn't Block eg Annas Archive for me, while my ISP does. I also don't reckon Germany tried to fine Cloudflare yet. So what is your point?
Additionally to the much larger IP space, you also have larger headers and additionally extension headers which make deep packet inspection computationally much more expensive if you consider the scale
They can also be a machine that might add a non-negligible amount of mineral oils and possibly other stuff to your food. The guideline to use should be that the ingredient list should be as short as possible. If it has more than 5 ingredients, that's already incredibly suspicious in my opinion. The problem is that some stuff (like a mineral oil contamination) doesn't even have to be declared on the ingredient list.
For example, normal simple bread should only have 4 or maybe 5 ingredients.
This is my personal approach too. I stock things with fewest number of ingredients. Example that comes to mind: RXBar might be UPF but there’s not much in it. Compared to your average name brand protein bar or granola bar.
The other downsides of both sugar and in particular glutamate are that you'll find other foods less sweet or having less depth of flavor (umami), so you'll be more likely to go for the processed options.
Edit: This is the kind of service that you should only expose to your intranet, i.e. a network that is protected through wireguard. NEVER expose this publicly, even if you don't have admin:admin credtials.
reply