Building untrusted container images safely at scale

Comments (2)

adastra22 · 3h ago

I'm confused--what's the security risk in building a container?

Telstrom90 · 2h ago

You're running untrusted code. Every RUN command in a user's Dockerfile is executed during build, which means you're executing arbitrary commands from strangers on your own infrastructure. If you're not isolating that properly, it's a security risk.

Show HN: AI Insights on Datagrid for Laravel/PHP (gridphp.com)

Humanity Is Playing Nuclear Roulette (theatlantic.com)

Show HN: What time is it in Corporate (peoplesgrocers.com)

The Monster Inside ChatGPT (wsj.com)

Blogging Like It's 1998 – The Pipetogrep Blog (blog.pipetogrep.org)

The Best of LessWrong (lesswrong.com)

Filibus (1915) [video] (en.wikipedia.org)

Paula Bozinovich, RIP (mjtsai.com)

Yes we are leaving OpenAI for Meta. No we did not get $100M (twitter.com)

From Visual Edits to Clean Code: How Relume Solved the React Export Challenge (notion.so)

I Joined Microsoft 40 Years Ago (benslivka.com)

A CRDT-Based Messenger in 12 Lines of Bash Using a Synced Folder (holdtherobot.com)

The Perils of 'Design Thinking' (theatlantic.com)

Firefox 141 Beta Lowering RAM Use on Linux but Still Benchmarking Behind Chrome (phoronix.com)

BBC and Heise boldly exploring the Fediverse frontier (stylestitches.substack.com)

Creative Commons Introduces CC Signals: A New Social Contract for the Age of AI (creativecommons.org)

Looking for AI tools in neovim (github.com)

Project Satyr – A Cloudflare competitor using novel techniques to trace attacks (voxga.es)

BBC rolls out paid subscriptions for US users (reuters.com)

Techniques for avoiding common long context fails (dbreunig.com)

Gemini CLI's Polarizing Release on Hacker News – A Visual Analysis (kian.prose.sh)

Norway's €19B software company Visma picks London for IPO (theguardian.com)

Our progress on CalyxOS after the release of Android 16 (calyxos.org)

Show HN: Telescope web-based log viewer update (docs.iamtelescope.net)

Back in black: Microsoft Blue Screen of Death going dark (theregister.com)

Data and Codes for GroceryDB (github.com)

Study Finds Link Between Brain Injury and Criminal Behavior (news.cuanschutz.edu)

Apple announces App Store changes to satisfy Brussels regulators (euractiv.com)

Optimal design could unlock the potential of bladeless wind turbines (techxplore.com)

The Lessons of History (1968) (en.wikipedia.org)

Show HN: We built Cora – an AI email assistant you can chat with (cora.computer)

Google – The Gemma 3n Impact Challenge (kaggle.com)

Show HN: Heycustomer – Subtle, WhatsApp-style popups that convert (heycustomer.co)

Hurricane forecasters scrambling after sudden shutdown of key satellites (notus.org)

How the next financial crisis starts. The climate shocks that trigger turmoil (ft.com)

Generate character consistent images with a single reference (github.com)

At just 21, Avicii was very technical in music production [video] (youtube.com)

How Your Cheese-Powered Baby Trounces AI (jessicanordell.substack.com)

Internationalization-check: Validating your Next.js internationalization (lingual.dev)

The Architectural Hostility of Doorknobs (sightlessscribbles.com)

Signal cloud backup alpha for Android (community.signalusers.org)

Ask HN: Would you use a self-hosted uptime monitor with a public status page?

AirlineMeals.net (airlinemeals.net)

Calculus Phobic's Introduction to Differentiable Programming (andersource.dev)

Senators reintroduce App Store bill to rein in 'gatekeeper power' (9to5mac.com)

The Bait to Crypto? Credit Cards Entice Users with Bitcoin Rewards (wsj.com)

How AI Agents Gather Data (blog.dust.tt)

Is the Volonaut Airbike Real or a Scam? (Expert Breakdown) [video] (youtube.com)

Programming as Theory Building: Why Senior Devs Are More Valuable Than Ever (cekrem.github.io)

GitHub Down

Building untrusted container images safely at scale

Comments (2)