containrh4x0r

repeat after me - "there are no isolation boundaries with containers" "containers are insecure"

Containers are broken by default because they share a kernel. If you want to use a container to have a replicable build environment fine - but for operational use in the context of "being secure" - no no no no.

jp morgan chase has a security budget of $600M/yr

https://www.secureworldexpo.com/industry-news/jpmorgan-chase...

another gem "ptrace sandboxing" ala gvisor which is horribly slow and shouldn't be used for production systems

https://news.ycombinator.com/item?id=19924036

seriously - what is going on at google nowadays? has it always been like this?

"use containers" - no no no - containers and kubernetes are horribly insecure and in a multi-tenant situation not even an option

great marketing google!