News for hackers. Stuff that matters.

A comment on A Docker footgun led to a vandal deleting NewsBlur's MongoDB database.

Re:A Docker footgun led to a vandal deleting NewsBlur's Mong... by meow112012 on Tuesday June 29, 2021 @02:10AM (#27672426)
I don't know how docker is to blame here; to me it's a bit unfair.

It's more about the setting of the ufw. Docker relies on their own NAT table, and setting ufw accordingly requires a bit of setup. That said, having a good setting from hosting provider is quite easier ans safer.

[ Parent | on HN ]
Re:A Docker footgun led to a vandal deleting NewsBlur's Mong... by Tepix on Tuesday June 29, 2021 @03:56AM (#27673097)
Docker's default goes against best practices. Just look at all those opened issues on Github. Clearly people get caught by surprise and may suffer a security compromise as a result.

Docker is 100% to blame here and they need to change the default! Just put it in the release notes and get it over with.

[ Parent | on HN ]