https://github.com/whatwg/html/issues/11523#issuecomment-315...
My understanding is that browsers specifically use the 1999 version and changing this would break compat
It's more difficult to break out of a VM and take over the host, unless a container has a very strict seccomp policy that limits the exposed kernel surface area. The Linux kernel's high rate of feature churn has resulted in an endless parade of root exploits. Locking down a container takes effort as you risk breaking the application by removing access to fancy kernel features du jour. VMs have bugs, too, but it's a better situation, especially if the interface between guest and host is limited to a few virtio drivers. Firecracker, for example, takes this minimalist approach; relative to containers it's more of a "secure by default" situation as far as host protection goes, and unless the guest environment requires direct access to peripheral hardware, everything will still work as intended.
- GPU compute units (used for LLMs)
- GPU "neural accelerators"/"tensor cores" etc (used for video game anti-aliasing and increasing resolution or frame rate)
- NPUs (not sure what they are actually used for)
And of course models can also be run, without acceleration, on the CPU.
[0]: He only has about 13% of the shares, but the dual allocation means that his class B shares are worth 10 votes. And he owns 99% of those shares. https://observer.com/2023/06/mark-zuckerberg-2023-shareholde...