News for hackers. Stuff that matters.

A comment on Analysis on Docker Hub malicious images: Attacks through public container images.

Re:Analysis on Docker Hub malicious images: Attacks through ... by Yeroc on Wednesday November 23, 2022 @03:11PM (#33723950)
This sounds like much-ado about nothing. We probably need to be far more concerned about "Docker Official Image"s that have been deprecated and are no longer receiving updates such as the "official" /_centos images (including centos7 which in theory isn't EOL but RedHat apparently doesn't care).
[ Parent | on HN ]
Re:Analysis on Docker Hub malicious images: Attacks through ... by sekh60 on Wednesday November 23, 2022 @07:15PM (#33726245)
Redhat has moved all their stuff to quay.io.
[ Parent | on HN ]
Re:Analysis on Docker Hub malicious images: Attacks through ... by Yeroc on Wednesday November 30, 2022 @06:12PM (#33809384)
Even on Quay the centos7 tag hasn't been updated in 2 years so it's clearly not getting any of the package updates. Yay, security!
[ Parent | on HN ]