3 ms·
When the creators themselves are saying they don't consider it secure, I don't think it's "FUD".
by scintill76 12y ago
When the creators themselves are saying they don't consider it secure, I don't think it's "FUD".
- general_failure 12y agoSorry, I didn't imply what Shykes said is FUD. I meant most of the articles out there about docker security have little to no information other than "breakout is possible".
- scintill76 12y agoThat quote from Shykes could be paraphrased "it's safest to assume breakout by uid0 is possible." I understand the academic/hacker interest in identifying the exact avenues for breakout, and why vague articles are disappointing. My point is, it's important everyone understand it's not to be considered secure, even if we can't/don't name the vulnerabilities off the top of our heads.
- general_failure 12y agoFair enough. I agree with you.