neoCrimeLabs

6 ms·

31.
by neoCrimeLabs 9mo ago
You start with the assumption of "properly set up container". Also I believe you are oversimplifying the attack surface. A container escape can be caused by combinations of breakdowns in several layers: - Kernel implementation - a
32.
by neoCrimeLabs 9mo ago
Containers are more isolation than without. That was never in debate in our conversation.
33.
by neoCrimeLabs 9mo ago
> This is not a weakness in the design of containers. Partially correct. Many container escapes are also because the security of the underlying host, container runtime, or container itself was poorly or inconsistently implemented. This
34.
by neoCrimeLabs 9mo ago
It depends on your threat model, but generally speaking would not trust default container runtimes for a true sandbox. The kata-containers [1] runtime takes a container and runs it as a virtual host. It works with Docker, podman, k8s, etc.
35.
by neoCrimeLabs 9mo ago
This is a well understood and well documented subject. Do your own research. Start here to help give you ideas for what to research: https://linuxsecurity.com/features/what-is-a-container-escap...
36.
by neoCrimeLabs 9mo ago
There goes my productivity for the weekend. :-D
37.
by neoCrimeLabs 10mo ago
What's your mother's maiden name? (Humor) My username is a dumb old name, but it's the one I have.
38.
by neoCrimeLabs 10mo ago
Thanks for the insights! That was helpful.
39.
by neoCrimeLabs 10mo ago
Gimp is not typically used as background process. It's primary use is as an interactive tool with a UI, therefore it's not typically a daemon. [1] [1] - https://en.wikipedia.org/wiki/Daemon_(computing)
40.
by neoCrimeLabs 10mo ago
Adding to this frustration is a 25yr registered 501(c)3 non-profit I volunteer for that holds an annual art festival. The festival proceeds go to funding educational materials. They've had an active facebook page for at least 15 year
41.
by neoCrimeLabs 10mo ago
As a Nuke, Fusion, and formerly MagicMusicVisuals user, I am excited to give TiXL a try. Love node based workflows, but find Blender too heavy for most of my needs. I'm surprised I have not run across it yet. Thanks @nateb2022 for shar
42.
by neoCrimeLabs 10mo ago
I can attest at least some of this is true. My blogging and publishing almost never comes up during an interview. Afterwards, I am openly told it's why they either asked for me, or why they chose me over another candidate. This has ha
43.
by neoCrimeLabs 10mo ago
Wasn't so much looking for an excuse, so much as more information. Why did you automatically assume the point of bias?
44.
by neoCrimeLabs 10mo ago
I am curious what percentge of the general populous test positive for THC. It would give better context to a dead drivers testing positive for THC.
45.
by neoCrimeLabs 11mo ago
> Markdown Lacks the Structure You Need I feel like this article makes a lot of valid observations, but then wraps them with a false dilemma. If it had tried to convince the reader of understanding what formatting needs are required befo
46.
by neoCrimeLabs 11mo ago
It's down detectors all the way down
47.
by neoCrimeLabs 11mo ago
Have similar studies been done over the decades? I remember the same sentiment when I was a teen and the sentiment was common among my peers. The times have changes significantly, and what is available to teens is very different now than wh
48.
by neoCrimeLabs 1y ago
If only Tommy Tutone had this list when they wrote 867-5309.
49.
by neoCrimeLabs 1y ago
Agreed on all points. I also recall reading a while back that it's also a dopamine trigger. If you make people feel better using your app, they keep coming back for another fix. At least until they realize the hollow nature of the af
50.
by neoCrimeLabs 1y ago
I am reasonably sure affirmations are a feature, not a bug. No matter how much I might disagree.
51.
by neoCrimeLabs 1y ago
That's not the word I'd use. I might say when they have an opinion on something it can be very specific.
52.
by neoCrimeLabs 1y ago
We're driving as many apps as possible to containers, and replacing most of our virtual infrastructure with Talos Linux [1] which is a reasonably hardened OS dedicated to Kubernetes hosting. I strongly recommend using the terraform p
53.
by neoCrimeLabs 1y ago
Wow, I forgot about this. It was surprisingly great for the time. Apparently I was one of their 4 customers, too!
54.
by neoCrimeLabs 1y ago
There's a lot of attention around increasing malicious contributors. Someone I don't know with no history contributing to my project immediately jumping into packaging, distribution, provenance would really have me questioning the
55.
by neoCrimeLabs 3y ago
Rolling with the analogy, I think learning rust a lot more like snowboarding, and C/C++ is more like learning to ski. I fell a lot more learning on snowboard than on skis. Skis had a much quicker early learning curve, and made me feel
56.
by neoCrimeLabs 3y ago
Sadly I don't remember GetRight had to google it. That said I remember how happy I was with Z-Modem when it came out. Before I had an error correcting modem with lots of line-noise I thought Z-Modem with it's built in error correc
57.
by neoCrimeLabs 3y ago
What reason? Nobody ever asked that. Kinda funny, I was learning about file-system data recovery and forensics around 1999-2000 and was impressed with how much data that could be retrieved from slack-space [1] on hard drives. I had origi
58.
by neoCrimeLabs 3y ago
Random things this post made me appreciate: Broadband - especially 1+Gbps connections (we are spoiled and I love it!) Latency that can be measured in milliseconds per packet around the world, not seconds or minutes per character. Multitaski
59.
by neoCrimeLabs 3y ago
Anyone remember the first question their Tier-1 support would ask? "Do you own a computer?" This was due to the fact that most of the people who called for support didn't understand what a CD-ROM was, and tried playing it in
60.
by neoCrimeLabs 3y ago
I don't remember specifics any more and don't have enough time to research at this moment - maybe later tonight. Around the time when ReiserFS v4 came out I remember there being a lot of strife around performance numbers - specifi

More ›