3 ms·
There was some site that got pawned because of this last year or so, I forgot the name but the owner did a nice write-up of it and there's a long HN thread on i
by Beltalowda 4y ago
There was some site that got pawned because of this last year or so, I forgot the name but the owner did a nice write-up of it and there's a long HN thread on it. There were many experienced Docker users – often using it daily in a business setting – that were not aware of this "feature".
Yes, you can document it somewhere, but 1) not everyone reads everything from cover-to-cover, and 2) even if you do, the real-world implications may not be immediately obvious (the way it was phrased, at the time, didn't make it obvious).
- k8sToGo 4y agoThat is why you usually secure your stuff by a hardware (or separate) firewall. But I too found this feature weird when I found out about it.
- JamesSwift 4y agoProbably thinking of NewsBlur. I know because the fallout from that is what this brought the issue to my attention in the first place. It was 5 years since a public issue was opened at that point, and has been a year since that story, and still nothing has changed.
- Beltalowda 4y agoAh yes, that's the one; thank you.