just limit resources like memory and cpu calculos, with something called cgroups. handle multiple processes isolated in your computer with something called namespaces to handle networks, processes, memory, and some types of "users" (docker is a process that execute others subprocess)

Namespaces provide the isolation needed to run multiple containers on one machine while giving each what appears like it’s own environment.

Minecraft is made from triagles for build a triangular mesh with the figure of a cube

Picture -> pixel

a lot projects with p2p like bittorrent and bitcoin are resistent to goverments see their internal working

have a parser to decode .torrents