News for hackers. Stuff that matters.

A comment on How the modern containerization trend is exploited by attackers. Parent comment

Re:How the modern containerization trend is exploited by att... by eropple on Wednesday June 13, 2018 @12:35PM (#17304644)
> For anyone using automated builds you can just review the Dockerfile either on Docker hub or github.

And then review what it `FROM`s. And then review the core OS build that relies on.

It's a lot of work. It is doable, but it is a lot of work.

[ Parent | on HN ]
Re:How the modern containerization trend is exploited by att... by raesene9 on Wednesday June 13, 2018 @12:41PM (#17304698)
indeed there's a hierarchy to follow up so can be painful, but then no different to where a shellscript goes and pulls more code as part of it's run.

I just wanted to make the point that I don't think it's impossible :)

[ Parent | on HN ]