News for hackers. Stuff that matters.

A comment on How the modern containerization trend is exploited by attackers. Parent comment

Re:How the modern containerization trend is exploited by att... by eeZah7Ux on Wednesday June 13, 2018 @12:18PM (#17304484)
Even worse. A simple script can be stored, reviewed and then executed. Reviewing a whole image is practically impossible.
[ Parent | on HN ]
Re:How the modern containerization trend is exploited by att... by raesene9 on Wednesday June 13, 2018 @12:34PM (#17304636)
Reviewing images is relatively straightforward. For anyone using automated builds you can just review the Dockerfile either on Docker hub or github.

For non-automated builds just pull to a local machine and use something like portainer to have a look around.

[ Parent | on HN ]
Re:How the modern containerization trend is exploited by att... by eropple on Wednesday June 13, 2018 @12:35PM (#17304644)
> For anyone using automated builds you can just review the Dockerfile either on Docker hub or github.

And then review what it `FROM`s. And then review the core OS build that relies on.

It's a lot of work. It is doable, but it is a lot of work.

[ Parent | on HN ]
Re:How the modern containerization trend is exploited by att... by raesene9 on Wednesday June 13, 2018 @12:41PM (#17304698)
indeed there's a hierarchy to follow up so can be painful, but then no different to where a shellscript goes and pulls more code as part of it's run.

I just wanted to make the point that I don't think it's impossible :)

[ Parent | on HN ]