3 ms·
> Who knows how many shared hosting providers were hacked with this. I'd consider a shared hoster which allows users to run their own (native) code and doesn't
by CodesInChaos 6mo ago
> Who knows how many shared hosting providers were hacked with this.
I'd consider a shared hoster which allows users to run their own (native) code and doesn't use VMs for tenant isolation extremely irresponsible in 2026.
- saysjonathan 6mo agoThis is probably more common than you think. VMs are expensive, both in resources and cost (if you’re using something commercial). OS-level isolation (shared kernel, cgroups, namespaces) is used pervasively
- CodesInChaos 5mo agoModern VMs, e.g. using Firecracker shouldn't be that expensive. I think it's crazy that Kubernetes doesn't use a VM per pod model, especially since it was started by security conscious google.