Propaganda_
Re:Dockerfile Security Best Practices
on Wednesday October 14, 2020 @06:29PM (#24782458)
If the services can't be modified to load their config directly from env vars, write the config to an off-root scratch volume (e.g. mounted to /tmp/) and have them load from that. The root volume should be mounted read-only either way to prevent modification of your services should something get RCE.
Re:Data from Experian breach found on the internet
on Monday September 14, 2020 @07:35AM (#24468970)
"Breached data still breached" - The only new thing in this article is that someone was stupid enough to believe Experian when they said the data had been "recovered".