News for hackers. Stuff that matters.
Re:Whonix – A desktop operating system designed for advanced... by vnglst on Friday February 03, 2017 @10:25AM (#13560368)
Would it be possible/make sense to use Docker for this?

Using something like Whalebrew? https://github.com/bfirsh/whalebrew

Re:Whonix – A desktop operating system designed for advanced... by segmondy on Friday February 03, 2017 @12:58PM (#13561714)
No, Docker is not built for security. I do use Docker sometimes to isolate processes, but not for serious security.
Re:Whonix – A desktop operating system designed for advanced... by meetri on Friday February 03, 2017 @01:29PM (#13561973)
if properly configured why not? What would stand in the way of implementing a secure containerized version of the workstation+gateway type setup?
Re:Whonix – A desktop operating system designed for advanced... by __jal on Friday February 03, 2017 @04:19PM (#13563421)
Theoretically, nothing. In practice, the isolation it relies on is somewhat weak. And in general, it is new and exciting and changing frequently, which means security bugs. Also, most people seem to rather suck at configuring it, as far as I've seen. (That's not per se a problem with Docker, but it is frequently a problem with Docker as-deployed.) And then there are potential kernel bugs.

When talking about "trusting X", one always has to answer the question "trust X to do what, exactly, under what circumstances?" I don't yet trust Docker to be secure enough for production, internet-exposed business use. I know other people disagree; YMMV.

Re:Whonix – A desktop operating system designed for advanced... by sebcat on Friday February 03, 2017 @01:43PM (#13562087)
You could break out of the isolation by using kernel vulnerabilities, e.g., in syscalls.
Re:Whonix – A desktop operating system designed for advanced... by asimpletune on Friday February 03, 2017 @12:21PM (#13561397)
Do you mean to implement this with Docker or just to use Docker with this OS?
Re:Whonix – A desktop operating system designed for advanced... by AlexCoventry on Friday February 03, 2017 @02:50PM (#13562678)
nth'ing the other warnings about this approach, but thanks for mentioning whalebrew. Looks very interesting.