• 0 Posts
  • 11 Comments
Joined 2 years ago
cake
Cake day: July 3rd, 2023

help-circle




  • I don’t want to tell you one way or the other because it’s kinda dubious anyway, but if all services run as the same user the need for root is kinda moot when it comes to crossing between services or expanding the scope of an attack. Of course it is better than all things running as root, but if I popped a machine as some “low privilege” user that still had access to all running services I’m not sure I’d care so much about escalating to root.


  • Woah, no. Sure escaping via a kernel bug or some issue in the container runtime is unexpected, but I “escape” containers all the time in my job because of configuration issues, poorly considered bind mounts, or the “contained” service itself ends up being designed to manage some things outside of the container.

    Might be valid to not consider it with the services you run, but that reasoning is very wrong.





  • This is also far from my personal experience, you might not even realize what free software you’re depending on?

    Your browser is most likely the most complex piece of software you interact with daily and it is most likely FOSS. The Linux kernel is FOSS and is incredibly robust. Most compiler suites, FOSS. Most programming languages, FOSS. These are all incredibly well written and robust tools. AOSP, kinda FOSS, and the forks like Graphene are definitely FOSS. Hell even a lot of macOS programs are actually FOSS. I could go on and on, there is absolutely amazing work being done on FOSS by incredibly talented people.

    There is great paid and proprietary software out there, sure, but no it’s not the majority of top quality software in my personal experience and likely a lot of people’s experiences and it is almost guaranteed to rely on a FOSS library somewhere