4 ms·
At -some- point you actually need to update things. If you're using a 2008 docker container you have all manner of bugs and security issues.
by lathiat 2y ago
At -some- point you actually need to update things. If you're using a 2008 docker container you have all manner of bugs and security issues.
- szundi 2y agoBut at least the attack vectors are limited
- vault 2y agoyes, limited to those that work 100%!
- poincaredisk 2y agoI agree. But 2008 is old enough that exploits may be lost in time. I recently pentested a client, and had great problems connecting to an old service still using SSL (i think it was 2.0). Every modern tool straight up refused to connect, there was no method to override that, oldest static curl binaries i could find were still too new, I couldn't easily compile curl from source because dependencies also changed in the meantime. Finally I've found sn acient docker image that worked. The service was ironically so old that no modern vulnerability scanner or programming language would be able to connect! This made me seeiously ponder the fleeting nature of modern world - SSL support was everywhere 15 years ago, and now I, as an expert, had great problems using it. What chance do we have in 100 years?