Re:Malware uses LLMs to rank victims by how much they're worth
by Aurornis on Sunday November 01, 2026 @12:54PM
(#50327903)
I knew someone would respond with this without reading the comment.
I’m on Mac. Docker containers run inside a VM. I said that if you don’t have that situation you need to take that into account.
Docker can be escapable by a determined attacker, but the common compromises you see from packages or downloads aren’t doing complex container escapes. They smash and grab what they can. Docker does enough isolation that they don’t see what they’re after. It’s not as good as a VM, but better than nothing.
I’m on Mac. Docker containers run inside a VM. I said that if you don’t have that situation you need to take that into account.
Docker can be escapable by a determined attacker, but the common compromises you see from packages or downloads aren’t doing complex container escapes. They smash and grab what they can. Docker does enough isolation that they don’t see what they’re after. It’s not as good as a VM, but better than nothing.