News for hackers. Stuff that matters.
Re:Tiny Container Challenge: Building a 6kB Containerized HT... by raesene9 on Thursday April 22, 2021 @04:43AM (#26900357)
I'm going to have to disagree with that statement. Containers (as implemented by Docker/containerD/CRI-O) do add security controls. Specifically, separate namespaces, restrictions on capabilities, seccomp filters and apparmor profiles.

If you can easily break out of any containerized enviornment, I'd suggest you could register for bug bounty programmes and make quite a lot of money also you can get a reward from Jessie Frazelle by escaping from https://contained.af/

Obviously containers have a larger attack surface than say a VM hypervisor, but security is not an absolute and both containers and VMs have suffered from breakout issues in the past. No security measure in isolation provides perfect protection.

Re:Tiny Container Challenge: Building a 6kB Containerized HT... by ex_amazon_sde on Thursday April 22, 2021 @08:29AM (#26901959)
No, you are confusing containers with sandboxing and they are completely orthogonal.
Re:Tiny Container Challenge: Building a 6kB Containerized HT... by emteycz on Thursday April 22, 2021 @05:22PM (#26908372)
Containers as understood in context of LXC or Docker are a strong variant of sandbox.