Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The black hat can find 0-day escalation in your sandbox, too.

A user account is a sandbox.



Not as air tight as a container

Edit: it’s about the attack surface


microvms are better than containers running on your host. see eg the "smolvm" microvms from https://smolmachines.com


thanks, will take a closer look




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: