4 ms·

AWS uses xen too, right?

• somanim 12y ago
  yes part of the reason I moved away from AWS years ago. Now it doesn't even matter since I am deploying to Docker anyways.
  • NeutronBoy 12y ago
    Good thing the host you run Docker on never needs to be patched or rebooted I guess?
    • hueving 12y ago
      Yes, docker is immune to vulnerabilities because containers.
      • Bdiem 12y ago
        Not immune to human error: https://medium.com/@fun_cuddles/docker-breakout-exploit-analysis-a274fff0e6b3 https://medium.com/@fun_cuddles/docker-breakout-exploit-anal...
      • __bjoernd 12y ago
        If the kernel you are running on is vulnerable, it can be attacked and the attacker can circumvent any container isolation. If the hypervisor (Xen!) running underneath your container-Linux is vulnerable, the attacker can get access to your virtualized OS and circumvent any container isolation.
        • Xylakant 12y ago
          your sarcasm detector may need recalibration.
      • kjs3 12y ago
        What a bright, shiny future we live in where "Docker!" is the answer to all problems.
• cperciva 12y ago
  There are a lot of vulnerabilities which don't affect them though -- either because the vulnerabilities are in specific features which EC2 doesn't use, or because Amazon is very conservative about which versions of Xen it uses and most vulnerabilities are in relatively new code. I certainly hope Amazon will respond to these publicly, but I won't be very surprised if the response is "doesn't affect us".