|
As JFrog security researchers found, around 20% of the 15 million repositories hosted by Docker Hub contained malicious content, ranging from spam to dangerous malware and phishing sites. I'm so glad someone's making use of containers
|
|
|
|
|
I prefer out-of-the-box programming.
I was working for a company having contractual obligations to deliver updates and bug fixes for x years. Lots of young, eager developers where actively++ promoting containers as The way to preserve a complete environment for generating an old system version with old version tools (which has been shown to be essential for reproducing bit-identical versions of the product). I was responsible for establishing a container based environment.
Luckily, I would say, we had an OS update. It turned out that the new OS version would not support the old containers, and that was as "promised": There was no promise to support the container version that we had used for our container based build system. The new OS version didn't make much long time promises, either. The disclaimers were clear and unambiguous: We could rely on our containers being runnable on new OS versions only for a fraction of our contractual support period.
For the container trials, we had to restrict future support to CLI tools, which is rather limiting. In principle, we could have switched to X.11 based GUI tools. Our primary IDEs were not X.11 based, but provided a lot of debugging and testing functionality that couldn't easily be replaced with X.11 based IDEs.
So containers were ditched as the basis for long-time support. It was simpler to set aside an old, real, machine with the old OS and old tool set to be used for future customer support, allowing GUI tools to be used (albeit old versions without the newer bells & whistles).
Containers may be useful for backend servers. While it in theory is possible to make end user containerized applications (based on X.11): In theory there is no difference between theory and practice, but in practice there is.
Containers belong way back in the back room, where *nix resides. Not in the user application domain.
Religious freedom is the freedom to say that two plus two make five.
|
|
|
|
|
Researchers have successfully used NASA's James Webb Space Telescope to map the weather on the hot gas-giant exoplanet WASP-43 b. "Winds light to variable"
|
|
|
|
|
Who cares for a weather forecast that is 280 years out of date?
Religious freedom is the freedom to say that two plus two make five.
|
|
|
|
|
An operating system on top of a distributed database, DBOS is a tantalizing glimpse of something that may eventually turn out to be cool. Databases all the way down
|
|
|
|
|
I can see how this would work for file systems, but how would it handle process isolation, resource allocation, etc. in a performant manner?
Freedom is the freedom to say that two plus two make four. If that is granted, all else follows.
-- 6079 Smith W.
|
|
|
|
|
Arc on Windows also represents an important milestone in getting Apple’s Swift apps running on Microsoft’s OS. Good luck with that
|
|
|
|
|
Hate to say it, but they need to hire at least one of MS's icon designers.
|
|
|
|
|
You don't like the ... uh, flossing look? 
TTFN - Kent
|
|
|
|
|
|
Making its AI-powered assistant generally available for developers and businesses, AWS also unveils free courses and a new Amazon Q capability in preview. All the apps it creates can also fire poison darts
I couldn't decide which Q to go with, and stuck with the older one.
|
|
|
|
|
This language is designed to meet the evolving needs of API developers, architects, and managers in an environment where the delivery of consistently high-quality APIs and related experiences is becoming increasingly complex and critical. An API API
Because of course it's all about the model. No one EVER needs to have some processing logic.
|
|
|
|
|
Despite seemingly exiting Microsoft, Bill Gates still plays a major role in the firm's decision making process. You can take the Bill out of the executive office, but you can't make him give up the keys
|
|
|
|
|
The agency discovered years ago that the carriers were selling location information to aggregators. "It's not paranoia if they're really out to get you."
|
|
|
|
|
Quote: AT&T was ordered to pay $57 million, while Verizon has to pay $47 million....
Surely those staggering amounts will cause them to change their ways. 
"the debugger doesn't tell me anything because this code compiles just fine" - random QA comment
"Facebook is where you tell lies to your friends. Twitter is where you tell the truth to strangers." - chriselst
"I don't drink any more... then again, I don't drink any less." - Mike Mullikins uncle
|
|
|
|
|
Credential-stuffing attack uses proxies to hide bad behavior. The attacks are coming from inside, outside, and all around the house
|
|
|
|
|
“We are doubling down on this very important work, putting security above all else — before all other features and investments,” Nadella said Thursday afternoon, after the company’s fiscal third-quarter earnings report. I'll believe it when I don't have to post about it
|
|
|
|
|
Kent Sharkey wrote: I'll believe it when I don't have to post about it
and even then it might be an AI deep fake  
M.D.V. 
If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about?
Help me to understand what I'm saying, and I'll explain it better to you
Rating helpful answers is nice, but saying thanks can be even nicer.
|
|
|
|
|
Kent Sharkey wrote: putting security above all else — before all other features and investments
This is what comes out of the south end of a north facing cow.
"the debugger doesn't tell me anything because this code compiles just fine" - random QA comment
"Facebook is where you tell lies to your friends. Twitter is where you tell the truth to strangers." - chriselst
"I don't drink any more... then again, I don't drink any less." - Mike Mullikins uncle
|
|
|
|
|
They can't even do security updates right, so...
|
|
|
|
|
Kent Sharkey wrote: putting security above all else — before all other features and investments
"Uh, except AI."
The difficult we do right away...
...the impossible takes slightly longer.
|
|
|
|
|
"And our QC department will confirm our security improvements."
|
|
|
|
|
But they don't have a... oooooohhh, I get it  
TTFN - Kent
|
|
|
|
|
(I tried to come up with something about them closing up shop and distributing all of their money, so they could ensure their QC department could not find any more security issues (since we are their QC dept). But "Microsoft - Out of Business" was probably too meta.  )
|
|
|
|
|
In this post we will explore the concept of development containers and how it can help us to solve some of the challenges involved in setting up a new development environment "What's in the box?"
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
