Containers Are No Longer a Security Boundary | depthfirst
depthfirst.com
As AI accelerates kernel vulnerability discovery and exploitation, the barrier to escaping containers by attacking kernel has fallen so significantly that we must assume attackers can do so at will.
  • Alex@lemmy.mlEnglish
    5·
    2 months ago

    The premise of the article is wrong from the start. Containers where never considered a security boundary exactly because they all share the same kernel. That’s why projects like kata containers exist that use the hardware enforced boundaries of virtualization.

    • Gladaed@feddit.orgEnglish
      1·
      2 months ago

      The premise is being trusted in some enterprise applications and awareness is not big enough.