2 ms·
> Docker provides much more isolation The very opposite. You can do all the sandboxing you want without needing docker and you will avoid docker's big attack s
by goodpoint 4y ago
> Docker provides much more isolation
The very opposite. You can do all the sandboxing you want without needing docker and you will avoid docker's big attack surface.
- naasking 4y agoNot without machine code analysis. That's a pretty big attack surface itself if you're relying on it for safety properties.