I hate that the isolation of containers gets oversold as a security feature because there is real value in what you might call "configura...
I hate that the isolation of containers gets oversold as a security feature because there is real value in what you might call "configuration isolation". Often, I am reluctant to run something not because of a trust issue but a complexity issue. I run a heavily customized environment. I will often be burned by an application---for example---creating a symlink that under "normal" circumstances is perfectly copacetic but all but destroys some carefully crafted aspect of my environment. Similarly, isolation that is not up to the task of stopping evil is often more than adequate for stopping stupid (e.g., the recent "Steam deletes your home directory" issue). How often have you updated your system only to have one or two apps misbehave? With what jessfraz presents here, yum and apt become tools you can apply selectively. There are real non-security benefits to be had. I realize that part of the oversell is the nature of hype but I can't help but feel that a---perhaps---equal part is that talking about these kinds of benefits is a more subtle and nuanced conversation.
Posted by gtjay on Feb 22, 2015, 12:17 AM
Tags
Related issues
- I also have a 2014 CR-V and I hate this too.
- I wish there was a setting to make audio and video opt in per site.
- There sure are.
- I feel like it's once a week that HN surfaces some incredibly overhyped, low-on-the-hierarchy-of-evidence ( https://en.wikipedi...
- That usually works well enough for risc code.
- > The Bulletin calls her Miss Swindell.
Raise real-world problems, find people facing the same issue, and discuss solutions.8,000 issues0 comments
complaint (Other)
I also have a 2014 CR-V and I hate this too.
NewI wish there was a setting to make audio and video opt in per site.
NewThere sure are.
NewI feel like it's once a week that HN surfaces some incredibly overhyped, low-on-the-hierarchy-of-evidence ( https://en.wikipedi...
NewThat usually works well enough for risc code.
New> The Bulletin calls her Miss Swindell.
NewI wish there was a way to sort by recency, if i'm mainly interested in finding obscure gems from like last 6 to 12 months of ai and tech ...
Android work profiles allow you to run multiple isolated copies in parallel - with separate address book and all.
I hate that the isolation of containers gets oversold as a security feature because there is real value in what you might call "configura...
I hate that the isolation of containers gets oversold as a security feature because there is real value in what you might call "configuration isolation". Often, I am reluctant to run something not because of a trust issue but a complexity issue. I run a heavily customized environment. I will often be burned by an application---for example---creating a symlink that under "normal" circumstances is perfectly copacetic but all but destroys some carefully crafted aspect of my environment. Similarly, isolation that is not up to the task of stopping evil is often more than adequate for stopping stupid (e.g., the recent "Steam deletes your home directory" issue). How often have you updated your system only to have one or two apps misbehave? With what jessfraz presents here, yum and apt become tools you can apply selectively. There are real non-security benefits to be had. I realize that part of the oversell is the nature of hype but I can't help but feel that a---perhaps---equal part is that talking about these kinds of benefits is a more subtle and nuanced conversation.
Comments (0)
No comments yet. Start the discussion.