3 ms·
> Make sure your kernel is always updated on all of your production hosts. And in order to avoid any zero-day exploits, always use dedicated machines, never us
by benevol 9y ago
> Make sure your kernel is always updated on all of your production hosts.
And in order to avoid any zero-day exploits, always use dedicated machines, never use a VPS server.
- oblio 9y agoI'm not sure I get this - are you saying that you are more at risk due to the VM host layer?
- openasocket 9y agoPersonally, I'd reasonably trust Xen or KVM or something else with hardware-based virtualization and the like to protect me in an multi-tenancy scenario. Much less so in the case of Docker. Sharing a full kernel with potentially malicious actors is more risky than sharing a hypervisor, much more surface area for attack.