Hacker Newsnew | past | comments | ask | show | jobs | submit | educar's commentslogin

Given that the most common case is running docker in server environments in VMs and the sysadmins are root, is this a real issue? Can you tell me an environment where a multi-tenant system runs docker?


Yes, it[1] is[2] a[3] real[4] issue[5] which leads to privilege escalation bugs. It also doesn't help that most containers that Docker is responsible for managing is supposed to be unprivileged, and Docker itself is commonly used as a component for a multi-tenant container runtime.

[1] https://www.cvedetails.com/cve/CVE-2019-15752/

[2] https://www.cvedetails.com/cve/CVE-2019-14271/

[3] https://www.cvedetails.com/cve/CVE-2019-5736/

[4] https://www.cvedetails.com/cve/CVE-2018-15664/

[5] https://www.cvedetails.com/cve/CVE-2018-15514/


If you lock down the docker user, is it a problem?


The biggest issue lies not in the few lines in /etc/passwd or /etc/group, but rather the highly privileged process with a large attack surface that is the Docker daemon.


RunCloud now announced their new pricing :-)


> Wayland, by contrast, has a security model for the modern, hostile internet built in from the start.

And yet basic video and screen capture is not working for years now. Arbitrary rectangle capture still doesn't work on Ubuntu 16.04 in any tool I know of.

So they made it so secure to make basic features not work.


I wonder if there will be a successor to Wayland and X11 that learns from the mistakes of both?

Can't always make wise improvements if you don't first make awful mistakes that weren't properly considered in practice.


> I wonder if there will be a successor to Wayland and X11 that learns from the mistakes of both?

Ubuntu wanted to do this with Mir. The rest is history...


A pity that the Mir devs didn't really have any experience or deep knowledge of the Linux graphics stack...

It took the X11 devs, many of whom were also involved in Mesa and Linux graphics development, literally years just to get all of the necessary plumbing in place in order to replace what X11 was previously doing.

These developments help not only X11 or Wayland, but make the development of a newer, superior protocol to X11 and Wayland much easier, because the hard yards have been done for them.

It also makes it easier for those who might want to transition from Wayland to a hypothetical superior protocol.


> And yet basic video and screen capture is not working for years now. Arbitrary rectangle capture still doesn't work on Ubuntu 16.04 in any tool I know of.

I'm curious, what tools have you tried? I ask because the default screenshot tool works perfectly for stills (including stills of video playing in a window or full-screen), and the few video screen recording tools I've tried all worked perfectly. At the moment I'm using Kazam on 16.04 with the default Nouveau drivers, and a quick test with Chromium playing a video stream + Totem simultaneously playing a local video file confirms that everything is captured no problem. Full screen, arbitrary windows, all tested and working.

Tl;dr try Kazam, unless I'm misunderstanding the issue you describe?


Why not just help with some tips here?


29?? Why is it so expensive?


Normally I would disagree with you, but it's running fine on my $5/month droplet. So... I'm saving $24/month because I know how to type "npm install."


What do you mean? I don't see anything on their site about being able to self-host it.


You can find out more info about self-hosting and how to install 1.0 in the docs: https://docs.ghost.org/docs/getting-started-guide

Digital Ocean also has a droplet with a pre-1.0 version pre-installed and ready to use.


I think the parent comment is referring to the open source code which you can self-host for free. You just need to pay for the metal/cloud that runs it.

See: https://docs.ghost.org/v0.11.9/docs/getting-started-guide/


you manually set it up? its one of the pre-configured images!


Honestly, I didn't know that, but I set it up quite some time ago. And it wasn't that painful. :)


Having automated security updates, backups and support has value though. Every server you have to admin is overhead.


DO has a preconfigured image but last time I checked it out it was pretty out of date.


Apologies for the dumb question but what technologies do blind people use today?


Your question is very generic, but in situations where this device might be used most (e.g. walking, getting around) I usually use the following:

  * Guide dog (still the non-technical, living and breathing version)
  * iPhone for GPS navigation if I don't know the environment
  * Aftershokz Bluetooth headset with bone conduction to listen to spoken announcements and still hear what's happening around me
In general, the blind use all kinds of standard consumer tech, smartphone, smartwatch, laptop/desktop etc. There are still lots of products out there specifically designed for the blind, but there is more and more a shift to standard devices.


The cane is a classic. Portable, no batteries, waterproof - identifies you to others that you are visually impaired.


That's true for blind travelers who use a white cane. But, most people who live with low vision, like myself, and are legally blind, tend to not use a white cane, simply because we want to 'blend in' and avoid the 'social stigma'.


There's a lot out there, including products that are very similar to this one[1]. The category you may be looking to Google is "assistive technology."[2]

For products for the blind, the most comprehensive list I could find was from the American Foundation for the Blind:

http://www.afb.org/ProdBrowseTaskResults.aspx?TaskID=274&Spe...

[1] - http://imerciv.com

[2] - https://en.wikipedia.org/wiki/Assistive_technology


Not directly related, but screen readers are very interesting. It is amazing just how fast they can run, sounding unintelligible to most. There is an excellent demonstration in this youtube https://www.youtube.com/watch?v=92pM6hJG6Wo

I wonder if feedback could also be given by such a quick spoken voice (eg describing the scene in front of you as you walk).


Please don't. The whole point of the device is to provide us an extra sense. Words aren't an extra sense - they're just a distraction. I'm always trying to avoid the sightling who insists on narrating the world for me. Please don't strap this annoying person to my wrist.


My friend who is blind uses an iPhone and a PC with screen reader software installed. She's a writer and is on Facebook all the time.


Do blind people have games on their iphones/android phones?

I checked some websites this week but it seems most of the audiogames are mostly for desktop computers and just a handful of iOS games.


I love using Apple's voice Over and zoom text on my mac. IMO being able to seamlessly zoom in and out of text while working is super helpful for people with low vision.


Linux users will not pay for appstore. There is no money to be made here. Just another timesink. You need to first attract significant non-developer users to Ubuntu (which is tied to making better laptops).


Yep, there was already a pay store with Ubuntu One. Bought some games there.


Nobody said it would be easy. On the other hand, there is Steam, which is an app store on Ubuntu.

The Ubuntu One store had technical issues and Snap solves at least a few of those if not all. For example, "works only on Ubuntu!" or "what about my dependencies?". It would be hilarious if Redhat users would buy their proprietary software from Canonical.

Still, the main challenge of an app store is not the technical side, but the business stuff: Get a critical mass of apps. It is also the reason why only Canonical or Red Hat could pull this off. It would be quite the hustle. Even Steve Jobs had some fights for the Apple App Store.

Some ideas to put there: Sublime Text, Gitlab EE, CLion, PyCharm, Zend Studio, Gurobi, Spotify, Netflix, TeamViewer, Matlab, Mathematica, SPSS, Stata, Maya, VMWare, Crossover Wine, Guitar Pro, Bricscad, Houdini, etc.

Another problem is the barrier of entry. How to get the customers to open an account? Once the account is open, buying stuff is one click and the 1$ apps will be bought on impulse. Cooperate with Humble Bundle and others for exclusive sales. The usual PR drill.

There are opportunities like App Store for Business. Where the company buys the IDE for all its employees via the app store and handles all the licencing there.


Same. does not make on chrome/Android.


Or iPhone.


Mods or OP, please change URL to http://paulgraham.com/quo.html?viewfullsite=1 to make it work on mobile

Thanks


GitHub stars can be easily gamed socially.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: