News for hackers. Stuff that matters.
Re:Mitigating Cloud Vulnerabilities [pdf] by skube on Thursday January 23, 2020 @02:45PM (#22131066)
"Containerization is less secure of an isolation technology than virtualization because of its shared kernel characteristics"

"Containerization, while being an attractive technology for performance and portability, should be carefully considered before deployment in a multi-tenant environment."

Re:Mitigating Cloud Vulnerabilities [pdf] by movedx on Thursday January 23, 2020 @07:46PM (#22134180)
"Containerization, while being an attractive technology for performance and portability, should be carefully considered before deployment in a multi-tenant[, shared] environment [in which the physical hardware is shared among many users]." -- I'd say that's more accurate.
Re:Mitigating Cloud Vulnerabilities [pdf] by fulafel on Friday January 24, 2020 @01:41AM (#22135912)
There are also security oriented container runtimes where this doesn't seem to apply (eg gVisor).