bl00d nprofile1q…cz45l nprofile1q…7fuh5 and I still won't trust containers to ...

2025-02-12 09:01:43

bl00d (nprofile…csq5) nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqhj2u5r7d8nz3s0p07fmgfvfdkqhcfk78n5qdlqfsxjhfep9zr8vq7cz45l (nprofile…z45l) nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqsqe5wfkzwp8rnc928desqea4ufv5p8m7t8sqptjegtjeazys8f4s97fuh5 (nprofile…fuh5) and I still won't trust containers to separate important secrets from each other.

With KVM, while still being dangerous, it's far less of a real danger.

Look at a real world example of 5G infrastructure hacking (which runs in K8s):
https://media.ccc.de/v/mch2022-273-openran-5g-hacking-just-got-a-lot-more-interesting

None of this stuff would've happened with VMs.

Author Public Key

npub1khk8yx57k7t62kf3reh58tazv0a6wyg9jel2n8a6tyngkphjryusymjwem

Show more details

Published at

2025-02-12 09:01:43

Kind type

1 Short Text Note

Event JSON

{ "id": "0197af76c8b1ea6eeaac4f996bdd9066c93aebdbbcd507e9a7e6e243caad4896", "pubkey": "b5ec721a9eb797a559311e6f43afa263fba71105967ea99fba59268b06f21939", "created_at": 1739350903, "kind": 1, "tags": [ [ "p", "98c5468181149f8aba606cb3fdb16652c7ba3f568b87e3ec13df068ad9ee6172", "wss://relay.mostr.pub" ], [ "p", "bc95ca0fcd3cc5183c2ff27684b12db02f84dbc79d00df813034ae9c84a219d8", "wss://relay.mostr.pub" ], [ "p", "80334726c2704e39e0aa3b730067b5e259409f7e59e000ae5942e59e88903a6b", "wss://relay.mostr.pub" ], [ "p", "9c5cf6f24cfc0e28e48c668526c20034714a9b21599a2324bd85c00d07164ad0", "wss://relay.mostr.pub" ], [ "p", "3b7f344a1d49ddbba6a8239850e3528d836a162b552f0e20c1c1a2bcdcf454a0", "wss://relay.mostr.pub" ], [ "e", "477c8785e8b1e78c82fa38470822b5cc75d86d2cdd9a9d5e41417df3bc52ca2c", "wss://relay.mostr.pub", "reply" ], [ "proxy", "https://chaos.social/users/manawyrm/statuses/113990100812305565", "activitypub" ] ], "content": "nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqnrz5dqvpzj0c4wnqdjelmvtx2trm506k3wr78mqnmurg4k0wv9eq0fcsq5 nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqhj2u5r7d8nz3s0p07fmgfvfdkqhcfk78n5qdlqfsxjhfep9zr8vq7cz45l nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqsqe5wfkzwp8rnc928desqea4ufv5p8m7t8sqptjegtjeazys8f4s97fuh5 and I still won't trust containers to separate important secrets from each other.\n\nWith KVM, while still being dangerous, it's far less of a real danger. \n\nLook at a real world example of 5G infrastructure hacking (which runs in K8s): \nhttps://media.ccc.de/v/mch2022-273-openran-5g-hacking-just-got-a-lot-more-interesting\n\nNone of this stuff would've happened with VMs.", "sig": "54655806a3a13d576f2813745f703d368147e986994ca85e3d940bd4c0329e530a1822bf0091d00400f010223ec1983d46471ad74b90f12f1d2ffcdd63cdeb8b" }

Manawyrm on Nostr: bl00d nprofile1q…cz45l nprofile1q…7fuh5 and I still won't trust containers to ...