this post was submitted on 24 Feb 2025
637 points (97.8% liked)

Programmer Humor

20763 readers
2674 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 2 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] kitnaht 17 points 18 hours ago (12 children)

The biggest problem that I have with docker is honestly, the fear of a supply-chain attack.

[–] [email protected] 1 points 17 hours ago (6 children)

You mean compromised code sneaking into Docker images? Or a DOS on dockerhub?

[–] roofuskit 2 points 14 hours ago (1 children)

They worry about someone replacing the docker image on the hosting server with a malicious modified version for people to pull down during updates.

[–] [email protected] 7 points 14 hours ago (1 children)

This worry exists for literally every 3rd party dependency, not just docker, and is addressed the same way - by running tests and vulnerability scans in a sandboxed test environment before shipping to prod

[–] roofuskit 2 points 13 hours ago (1 children)

I was just answering a question. I had the same response above.

[–] [email protected] 2 points 13 hours ago

And I was just adding extra details

load more comments (4 replies)
load more comments (9 replies)