Re:Cybersecurity Pros Name Their Price as Hacker Attacks Swell
by hyperion2010 on Wednesday August 07, 2019 @07:55PM
(#20640475)
I'm out here imagining all the unethical hackers drooling over the sweet sweet vectors that are snap and flatpak. Unfortunately the qa and auditing aspects of distro packaging seem to be taken for granted, and the resources for that are surely not sufficient to counter motivated adversaries.
[ Parent
| on HN ]
Re:Cybersecurity Pros Name Their Price as Hacker Attacks Swell
by antod on Wednesday August 07, 2019 @08:32PM
(#20640715)
Don't forget helm charts and docker containers. The security/assurance of that supply chain is pretty lacking.
It feels like some people are actively applying the (historical?) Wordpress security model to Kubernetes for expediency.
Re:Cybersecurity Pros Name Their Price as Hacker Attacks Swell
by snazz on Wednesday August 07, 2019 @08:43PM
(#20640769)
Do enough people actually use Snap or Flatpak (especially at large companies) to make it worth anything? I’d imagine that most people would just use real distro packages and stuff compiled from source instead of trusting Snapcraft or random Flatpaks off the Internet, especially in production.