Hacker News new | ask | show | jobs
by anonymousJim12 2769 days ago
Even if the containers were running on the same physical machine as the webapp you'd have to break out of the container your code is in first... If you know of a container breakout exploit then you should definitely publish it!
1 comments

a container is not about security, I don't think docker made any claim that you can't easily escape from a container.
Right, a container is about isolation.

I didn't mention anything about docker, seeing that containers are a linux kernel feature, but if you know of container escape vulnerabilities in the kernel you should publish them.