2 ms·
Adding to the parent's point. The docker hub is full of malware images and the docker devs could not care less.1.2.3. 1. https://www.bleepingcomputer.com/news/
by mmh0000 3y ago
Adding to the parent's point. The docker hub is full of malware images and the docker devs could not care less.1.2.3.
1. https://www.bleepingcomputer.com/news/security/docker-hub-repositories-hide-over-1-650-malicious-containers/ https://www.bleepingcomputer.com/news/security/docker-hub-re...
2. https://sysdig.com/blog/analysis-of-supply-chain-attacks-through-public-docker-images/ https://sysdig.com/blog/analysis-of-supply-chain-attacks-thr...
3. https://www.bleepingcomputer.com/news/security/thousands-of-images-on-docker-hub-leak-auth-secrets-private-keys/ https://www.bleepingcomputer.com/news/security/thousands-of-...
- heresie-dabord 3y agoIt's often the case with software "repositories". Pypi, npm, Maven... Security is expensive. An organisation needs money, on-staff security professionals, and (of course) lawyers to explicitly commit to maintaining a package system. Even MAAMAN (was FAANG) app stores have been exploited. FYI your second link is broken or dead.