A Docker footgun led to a vandal deleting NewsBlur's MongoDB database
It's not all that great blaming the victim. They clearly made the right moves with at least some of their configuration decisions and leaned on the underlying platform not being bonkers (but alas, it was: https://github.com/moby/moby/issues/4737 and https://github.com/moby/moby/issues/22054).Should they have hardened in all the other ways for defense in depth, e.g requiring authentication from localhost? Sure. Should the attacker have not done the attack? Without a doubt. But should docker have not completely undone a security control?Yes, and the fact that docker seems to have persisted with the current state is the topic of discussion.Previously: https://news.ycombinator.com/item?id=27613217