farimani
Re:I deleted 78% of my Redis container and it still works
on Saturday July 16, 2022 @02:52PM (#32120801)
The issue is beyond careful package selection at dockerfile level. Even after carefully building your images, you’ll pull in a good number of unused dependencies.
Re:I deleted 78% of my Redis container and it still works
on Saturday July 16, 2022 @02:47PM (#32120762)
You can direct the hardening process based on the instrumentation data, then bake it into your CI/CD and automate it. That’s how the community images are produced.
Re:I deleted 78% of my Redis container and it still works
on Saturday July 16, 2022 @02:25PM (#32120562)
Leaving unused components in your workloads is indeed a security issue. A data breach takes over seven months to detect on average. During that time, the attacker is mainly squatting on your infra and finding deeper attack vectors to move laterally. This of course is a broad statement. Somethings are a lot harder to exploit than others.
Re:I deleted 78% of my Redis container and it still works
on Thursday June 16, 2022 @12:55PM (#31768316)
super cool. we pull in a lot of software when we build our apps on top of packages. each package does a thousand things and the app uses only a fraction of it. in this case, it's probably a bunch of OS packages.
Re:Ask HN: Why are there no big cloud vendors based in Europe?
on Thursday June 16, 2022 @12:41PM (#31768117)
OVH Cloud