News for hackers. Stuff that matters.

A comment on CopyFail was not disclosed to Gentoo developer. Parent comment

Re:CopyFail was not disclosed to Gentoo developer by CodesInChaos on Thursday April 30, 2026 @04:49PM (#47968036)
> Who knows how many shared hosting providers were hacked with this.

I'd consider a shared hoster which allows users to run their own (native) code and doesn't use VMs for tenant isolation extremely irresponsible in 2026.

[ Parent | on HN ]
Re:CopyFail was not disclosed to Gentoo developer by saysjonathan on Thursday April 30, 2026 @05:03PM (#47968204)
This is probably more common than you think. VMs are expensive, both in resources and cost (if you’re using something commercial). OS-level isolation (shared kernel, cgroups, namespaces) is used pervasively
[ Parent | on HN ]
Re:CopyFail was not disclosed to Gentoo developer by CodesInChaos on Friday May 01, 2026 @11:49AM (#47976179)
Modern VMs, e.g. using Firecracker shouldn't be that expensive. I think it's crazy that Kubernetes doesn't use a VM per pod model, especially since it was started by security conscious google.
[ Parent | on HN ]