Re:How the modern containerization trend is exploited by att...
by orthecreedence on Wednesday June 13, 2018 @03:08PM
(#17306072)
...unless said docker container is running an app server that has direct access to your database.
Re:How the modern containerization trend is exploited by att...
by walrus01 on Wednesday June 13, 2018 @07:51PM
(#17308057)
It is kind of disturbing that apparently a huge number of people installed these Docker containers and did not care to notice that they were using 100% CPU on all available cores, 24x7.
Curl piping into bash will trivially steal all of your data at once.
Running a container from dockerhub is much safer, provided you do not give it privileges using --privileged or bind-mounting system files like docker control socket.
If your system is up to date and there are no docker 0-days active, the worst "docker run --rm -it RANDOM-CONTAINER" can do is to use too much resources -- your local secrets would be safe.