News for hackers. Stuff that matters.

A comment on Docker limits unauthenticated pulls to 10/HR/IP from Docker Hub, from March 1. Parent comment

Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by hansvm on Friday February 21, 2025 @04:15PM (#43133070)
> but none of that fixes a production system that's built on the assumption that these changes aren't happening.

Somebody's going to have the same excuse when Google graveyards GCP. Till this change, was it obvious to anyone that you had to audit every PR fluff piece for major changes to the way Docker does business?

[ Parent | on HN ]
Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by flubbergusto on Friday February 21, 2025 @04:17PM (#43133095)
Sure, but at least those of us reading this thread have learned this lesson and will be prepared. Right?
[ Parent | on HN ]
Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by hansvm on Friday February 21, 2025 @06:00PM (#43134152)
Oh definitely.

This isn't exactly the same lesson, but I swore off Docker and friends ages ago, and I'm a bit allergic to all not-in-house dependencies for reasons like this. They always cost more than you think, so I like to think carefully before adopting them.

[ Parent | on HN ]
Re:Docker limits unauthenticated pulls to 10/HR/IP from Dock... by sbarre on Friday February 21, 2025 @10:31PM (#43135822)
> was it obvious to anyone that you had to audit every PR fluff piece for major changes to the way Docker does business?

You seem(?) to be assuming this PR piece, that first announced the change back in Sept 2024, is the only communication they put out until this latest one?

That's not an assumption I would make, but to each their own.

[ Parent | on HN ]