🖖USS-Ethernet@startrek.website to Selfhosted@lemmy.worldEnglish · 11 hours agoI've been busystartrek.websiteimagemessage-square46linkfedilinkarrow-up1246file-text
arrow-up1246imageI've been busystartrek.website🖖USS-Ethernet@startrek.website to Selfhosted@lemmy.worldEnglish · 11 hours agomessage-square46linkfedilinkfile-text
minus-squareirmadlad@lemmy.worldlinkfedilinkEnglisharrow-up1·5 hours ago OP built a security nightmare How so?
minus-squarequick_snail@feddit.nllinkfedilinkEnglisharrow-up2·4 hours agoDocker will happily download malicious containers. It doesn’t use cryptography to verify what it downloads during the layer pull.
minus-squarekrashmo@lemmy.worldlinkfedilinkEnglisharrow-up2·3 hours agoThat’s overly dramatic phrasing and you know it. Adding this kind of hyper technical quip to a thread aimed at beginners is insane. Stop doing that.
minus-squareirmadlad@lemmy.worldlinkfedilinkEnglisharrow-up1·3 hours agoLinux can do that too from miners, backdoors/SSH credential stealers, bots, rare ransomware but they exist, rootkits, spyware, and supply‑chain attacks
How so?
Docker will happily download malicious containers. It doesn’t use cryptography to verify what it downloads during the layer pull.
That’s overly dramatic phrasing and you know it. Adding this kind of hyper technical quip to a thread aimed at beginners is insane. Stop doing that.
Linux can do that too from miners, backdoors/SSH credential stealers, bots, rare ransomware but they exist, rootkits, spyware, and supply‑chain attacks