3 ms·
I think the difference is that that seems like something I would screw up. I know how to make a $5 DigitalOcean instance that only has ImageMagick that I can pi
by 3pt14159 11y ago
I think the difference is that that seems like something I would screw up. I know how to make a $5 DigitalOcean instance that only has ImageMagick that I can pipe photos to and from. I don't trust myself to unshare the network from some running process without leaving other holes.
There are all these gotchas when you have stuff running in the same OS and it just takes one little mistake and your adversary has root.
- sedachv 11y agotl;dr Unix security model is too hard to use. Let's put another layer of crap around it!
- mplewis 11y agoDon't be reductive – OP made a very good point, and you're not arguing it head-on. > There are all these gotchas when you have stuff running in the same OS and it just takes one little mistake and your adversary has root.
- deleted 11y ago[deleted]
- sedachv 11y agoHow is "There are all these gotchas when you have stuff running in the same OS and it just takes one little mistake and your adversary has root" not saying that the Unix security model is too hard to use?
- jfb 11y agoNo, the Unix security model is insufficient.
- stormbrew 11y agoI'm... very skeptical that it's trivial to make a $5 DO instance you can pipe imagemagick to from another host and has nothing else on it. Note that if you're talking about using a linux image, this is not even remotely a unikernel. Also, there are still myriad ways this kind of interface can represent an attack surface if you aren't sufficiently careful with the communication protocol (that presumably you are writing).