Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://mastodon.social/users/brauner/statuses/114749358998592121">Christian Brauner ?? (brauner@mastodon.social)'s status on Thursday, 26-Jun-2025 22:47:52 JST</a><a href="https://mastodon.social/@brauner" title="brauner@mastodon.social"><img src="https://gnusocial.jp/avatar/109510-48-20230324235854.webp" width="48" height="48" alt="Christian Brauner ??" style="position: absolute; left: 0; top: 0;">Christian Brauner ??</a><div><ul><li></ul></div></section><article><p>I love how Apple will now be repeating every goddman security mistake by writing their own container runtime. I thought we're past all that but hey, let's have some more path lookup CVEs. <a href="https://mastodon.social/@cyphar">@cyphar</a> </p><p><a href="https://github.com/apple/containerization/pull/173" rel="nofollow">https://github.com/apple/containerization/pull/173</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/5261364#notice-10323208">In conversation</a><time datetime="2025-06-26T22:47:52+09:00" title="Thursday, 26-Jun-2025 22:47:52 JST">about a year ago</time> <span>from <span><a href="https://mastodon.social/@brauner/114749358998592121" rel="external" title="Sent from mastodon.social via ActivityPub">mastodon.social</a></span></span><a href="https://mastodon.social/@brauner/114749358998592121">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: opengraph.githubassets.com</div><h5><a href="https://github.com/apple/containerization/pull/173">mount /dev/console by elijah-wright · Pull Request #173 · apple/containerization</a></h5><div></div></header><div>fixes #145
this PR changes configureConsole() to bind mount /dev/console if process.terminal is true. I couldn't think of a better way to get the pty path so I used readlink. most OCI images do...</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Christian Brauner ?? (brauner@mastodon.social)'s status on Thursday, 26-Jun-2025 22:47:52 JSTChristian Brauner ??
- Aleksa Sarai 暗号君
I love how Apple will now be repeating every goddman security mistake by writing their own container runtime. I thought we're past all that but hey, let's have some more path lookup CVEs. @cyphar
https://github.com/apple/containerization/pull/173
In conversationabout a year ago from mastodon.socialpermalink
Attachments
1. Domain not in remote thumbnail source whitelist: opengraph.githubassets.com
  mount /dev/console by elijah-wright · Pull Request #173 · apple/containerization
  fixes #145 this PR changes configureConsole() to bind mount /dev/console if process.terminal is true. I couldn't think of a better way to get the pty path so I used readlink. most OCI images do...

Public

Embed Notice

HTML Code

Corresponding Notice