On: Threat Actors Now Target Docker via Container Esca...

[orra]

Cloud hosting... if you're on the same physical node as a malicious actor, then ouch.

[ta988 → orra]

Did you ever see cloud hosting where you can run privileged containers on a shared machine?

[orra → ta988]

Privileged? Maybe not. But in general, Docker is not a security boundary, but people treat it like one.

[krab → orra]

The services I have experience with host containers on a VM that is not shared between customers.

[orra → krab]

That's good. But I don't think the major cloud providers make it very obviously, either way. And when something's not clear, often the answer isn't good.