WEP is where I’d personally draw the line, but the N95 fortunately supports WPA.

As far as I remember, there were even some games that supported the Wiimote natively? I don't remember if this was via Flash or Javascript, but there seems to be a library for the latter: https://github.com/ryanmcgrath/wii-js

I unfortunately never got to use the Nintendo DS version (the DS being WEP-only was a dealbreaker for me).

On the other hand, in other scenarios, people trust the security boundaries of their working as expected all the time, no? This is the basis of e.g. Android app isolation (every app runs under its own Linux UID/GID), and true multi-user Unix systems trusting the OS's security boundaries to hold have decades of history.

The use case is actually the opposite of what you seem to want (i.e. running Linux containers on macOS without a Linux VM); this uses a Linux-based container implementation of macOS to provide a long-lived Linux VM that looks more like a VM itself than a container.

This was due to implicitly granting the LLM access to the host docker daemon, which has superuser privileges, not due to a "container breakout". That's arguably a very different scenario, but of course both are worth considering.

> So if you want to use containers for anything but easier development, you need to be much more proficient than the average user already.

I'd disagree. Containers, at least without granting them additional privileges such as CAP_NET_ADMIN and without write-bind-mounting sensitive host directories into the container, offer a reasonable security boundary compared to the counterfactual, despite their bad reputation.

As for who does that authentication: Given all the suggestions in the sibling threads, I really don't think we're in a situation where there's a single entity gatekeeping access by any means.

If it were as cheap and efficient as TLS these days, yes, absolutely

> Maybe we should have solve the ISP snooping problem by making that illegal instead.

We could do both! ISP snooping is still a problem for metadata (SNI).

They might be compelled to issue a certificate to an unauthorized (by browser PKI policies, not local law) entity, but that would be very conspicuous due to Certificate Transparency.