repeat after me - "there are no isolation boundaries with containers" "containers are insecure" Containers are broken by default because they share a kernel. If you want to use a container to have a replicable build…
jp morgan chase has a security budget of $600M/yr https://www.secureworldexpo.com/industry-news/jpmorgan-chase...
another gem "ptrace sandboxing" ala gvisor which is horribly slow and shouldn't be used for production systems https://news.ycombinator.com/item?id=19924036 seriously - what is going on at google nowadays? has it always…
"use containers" - no no no - containers and kubernetes are horribly insecure and in a multi-tenant situation not even an option great marketing google!
repeat after me - "there are no isolation boundaries with containers" "containers are insecure" Containers are broken by default because they share a kernel. If you want to use a container to have a replicable build…
jp morgan chase has a security budget of $600M/yr https://www.secureworldexpo.com/industry-news/jpmorgan-chase...
another gem "ptrace sandboxing" ala gvisor which is horribly slow and shouldn't be used for production systems https://news.ycombinator.com/item?id=19924036 seriously - what is going on at google nowadays? has it always…
"use containers" - no no no - containers and kubernetes are horribly insecure and in a multi-tenant situation not even an option great marketing google!