Re:Run Nasm X86/x64 Assembly Code Online
by zx2c4 on Tuesday July 28, 2015 @04:55AM
(#9960297)
Oh god. Just checked out this dbgr situation. Looks like they allow you to run arbitrary code inside one of their docker instances. DISASTER.
Never ever use docker for security. With a Linux kernel local root exploit (which are indeed plentiful), one can escape from a docker container into the initial namespaces of the system.
It doesn't even look like they bother keeping their kernel up to date either.
DISASTER!
I liked the approach I saw at a couple other sites -- compile an interpreter to JavaScript with emscripten, and have all the code execute client side.
Never ever use docker for security. With a Linux kernel local root exploit (which are indeed plentiful), one can escape from a docker container into the initial namespaces of the system.
It doesn't even look like they bother keeping their kernel up to date either.
DISASTER!
I liked the approach I saw at a couple other sites -- compile an interpreter to JavaScript with emscripten, and have all the code execute client side.