startling
Joined 13 years ago
Karma
396
Submissions
192
Member since
Nov 30
Joined 13 years ago
Docker can totally reduce the risk of in-container services being exploited. It has sane defaults, and makes it easy to distribute other restrictions with the application (seccomp profile, apparmor settings, etc).
1). Prevent this business from existing.
2). Allow toy magnets to exist, thereby allowing X children to die from swallowing toy magnets.
I don't think this is ZenMagnet's fault. But I think placing a restriction on toy magnets is probably a net positive.