alt Hacker NewsThat's not what I said, nor is it what I meant. It is incredibly easy to write radically safer software than the standard. Moving code into gvisor virtually eliminates privilege escalation. Using memory safe languages without serialization is pretty straightforward. Using type safety to enforce security constraints is straightforward. Setting up network controls to limit SSRF is straightforward.
I could go on and on. A tiny bit of forethought and effort pays off massively.
Replies
bottlepalm • yesterday at 11:30 PM
You don’t understand. You need to write perfect software the first time for it not to be hacked. That has never happened ever.
➕ show 1 reply
> Moving code into gvisor virtually eliminates privilege escalation.
Rereading this, it's an overstatement. It doesn't "virtually eliminate" it. It drives the cost up by like 3 orders of magnitude and it pairs well with other mitigations. gVisor escapes can and will happen, I highly recommend you do more than just stuff something into gvisor - additional seccomp can go a long way, and apparmor/selinux pair incredibly well.