News for hackers. Stuff that matters.
Re:Docker Desktop: Your Desktop over ssh inside of a Docker ... by txutxu on Monday July 08, 2013 @02:53PM (#6008441)
I think there is more danger in html5 dinamyc fonts, or more evil in a dns request, than an opensource project installer.

Of course, don't do this on your most beloved production machine, if you can package it properly, test it, etc

But rendering a font gives execution with your user, so don't be so afraid of a installer "you can read" and has an interesting purpose.

Re:Docker Desktop: Your Desktop over ssh inside of a Docker ... by rsync on Monday July 08, 2013 @06:25PM (#6009760)
"But rendering a font gives execution with your user"

Would you point us to a reference, or a further explanation for this claim ? I am genuinely interested...

Re:Docker Desktop: Your Desktop over ssh inside of a Docker ... by txutxu on Monday July 08, 2013 @06:38PM (#6009823)
Sure, it was just an example...

http://securitytracker.com/id/1024283