in one of your talks about Guix, you argued about Docker that it contain blobs affected by security issues and that such things are hard to monitor and fix

I'd like to find that talk, I was asked by a friend about it


well, what my friend asked me about is not this, I misunderstood the question

what my friend asked me about is signed artifacts

they're a binary exploitation crack, so when they overhear such things, such things stick into their head and they ask about them a few days later 😏

don't they, @neetx ? 😁

Sign in to participate in the conversation

The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!