News for hackers. Stuff that matters.

A comment on LiteLLM Python package compromised by supply-chain attack. Parent comment

Re:LiteLLM Python package compromised by supply-chain attack by ashishb on Wednesday March 25, 2026 @12:29PM (#47519599)
> docker run super-evil-oci-container

  1. That super evil OCI container still needs to find a vulnerability in Docker
  2. You can run Docker in rootless mode e.g. Orbstack runs without root
[ Parent | on HN ]
Re:LiteLLM Python package compromised by supply-chain attack by staticassertion on Wednesday March 25, 2026 @05:11PM (#47523331)
They're suggesting that the attacker is in a position to `docker run`. Any attacker in that position has privesc to root, trivially.

Rootless mode requires unprivileged user namespaces, disabled on almost any distribution because it's a huge security hole in and of itself.

[ Parent | on HN ]