3 ms·
4M Docker Images Shows Half Have Critical Vulnerabilities
- musicale 6y agoGood thing we don't use shared libraries anymore. Or package managers.
- vaxman 6y agoWe need more modern laws that define what credible software security providers are and subjects them to basic regulatory inspection (like oil refineries, for example), but also forces hardware OEMs (like Apple, Oculus, etc.) to allow these security companies to audit and digitally sign all factory-loaded firmware images, operating system installers and the apps that are included with hardware purchases or otherwise installed from new third-party app-stores, container repositories and downloadable/net-bootable distro stores, etc.
- Droobfest 6y agoI'm fine with this, but it should be straightforward for small app developers to certify their app or it will just create another moat for the big boys.