Leaky Vessels deep dive: Escaping from Docker one syscall at a time
Breaking container isolation by racing the filesystem The Snyk Security Labs team recently embarked on a research project into the Docker engine. During this project, I had the opportunity to perform what is arguably my favorite kind of research using...
