dyn

3 ms·

1.
by dyn 10y ago
Hi author here. Yes, that is what I was trying to say. I'll clarify it in a future version. That's a good point, I'll include that! Thanks.
2.
by dyn 10y ago
Hi author here. Are you saying it doesn't allow a malicious/compromised container to reduce the pool size down to something which might cause other daemons to block, possibly indefinitely, which need "strong" entropy vs
3.
by dyn 10y ago
Hi author here. Thanks! It was a lot of hard work, I'm glad it's being well received and seems like people are generally finding it useful- the main point of writing it. I would have liked to talk a lot more about other non-Linux
4.
by dyn 10y ago
Hi author here. I expected some folks who know a lot more about unikernels might have some feedback. I wanted to cover them because I think they're an interesting from a security perspective/they relate to containers but will admi
5.
by dyn 10y ago
Hi author here, I'll admit I'm not super familiar with Mirage OS, I've only used it a bit, but I wanted to include some discussions of it. I had read it was related (somewhere I can't remember) but I'm happy to be c
6.
by dyn 10y ago
Author here. Oops, will fix, thanks.
7.
by dyn 10y ago
Hi, author of paper here. Couple things: - I agree the requirement of using Docker hub or their private hub is an unfortunate requirement, but I'm talking purely about the technical implementation. "Does not work for enterprises a
8.
by dyn 10y ago
Author of the paper here. Thanks. As for Jails and Illumos, I would be willing to bet it's people not looking, but I haven't looked, so I can't really say. I agree it's kind of a mess, but it's getting better!
9.
by dyn 10y ago
Hi, Author of the paper here. After seeing the email Spender sent me, I can say most of his fixes/recommendations don't change a lot of the core messages/points/etc, even on grsec related sections. I'll be releasing