If I understand correctly, rootfull podman with --userns=auto would also prevent the privilege escalation ?

No it wouldn't. The exploit is not impacted by namespaces.

How?

--userns=auto asign a different namespace for each container, so if you escape it you get a random uid far far away from root it also protects other containers from the compromise since they each have their own namespace and uid/gid range, the drawback though is that you can't mount shared volume unless you use a pod, since you would see files from outside your uid/gid range as owned by nobody and inaccessible.

That might make Copy Fail harder to exploit, but I still wouldn’t bet money on CF being impossible to use in that scenario.

Since in --userns=auto, root inside the container gets assigned to the first uid of the uid range assigned by podman, copyfail would succeed but you'd get uid 647831 and be able to do nothing with it

Fuck big tech, I'm fine with using Mistral

Go ask kids forced to work for years in cocoa plants or coltan mins in africa what they think of your little explaination

Is this supposed to be ... a gotcha? If slavery is involved, it's not capitalism, by definition. Distance attenuates all signals, so each transaction step may somewhat smear or smudge such a stain. Really not clear at all what you're getting at.

I am pretty sure they know our identity pretty accurately already, through browser fingerprinting and google's gmail data, my real concern is the half-assed security measure with our id cards. The persona breach just recently proved they cannot be trusted and this expose us to identity fraud/theft.

A tolerant society cannot tolerate intolerence, lest it gets destroyed by it.

You cannot give anything to fascists, we know what they do, history is there, they didn't change, they're doing exactly the same thing.

I read that during the irish occupation, irish policemen (so, working for the british governement) were rejected and isolated socially, treated as traitors to their people.

Which led them to eventually refuse to continue oppressing their people for money, the revolution, independance, all that.

I kinda see connections, don't you ?

Did you know the early nazis where actually impressed by america's segregation and racism and lamented they couldn't easily do the same? Well, they kinda did in the end.

Class of people in the occident*

Well, I've never used linkedin outside of job hunts, and for that it was useful.

The social media part seems trash tier and I want no part of it though.

A tolerant society cannot tolerate intolerance, lest it gets destroyed by it.

Free speech ends where hatred starts.