▲ | vrighter 3 days ago | |
so the application crashes inside the container, and the container is restarted, vs the application crashes outside the container and it is restarted. What's the difference? | ||
▲ | keyle 3 days ago | parent [-] | |
Well, the difference is that someone could PoTenTiAlLY spawn a shell if they get their way. So between server access as a user and container access (if it has a shell), it does make a difference. A good book on this was "Hacking: The Art of Exploitation". My argument though is that irssi is that old, I think automatic file receiving (DCC) is off by default and it has sensible defaults and a long history of being reliable(?) |