Most programmers use docker or don't install extensions unapproved by their company.

That's patently not true, source, me, a DevOps manager who has had to roll out proper docker and security policy for devs for the past 10 years :)

	▲	kelnos 34 minutes ago \| parent [-]
		Your anecdote does not make GP's comment "patently untrue". It's just a counter-example, and we don't know how prevalent your scenario is compared to GP's. (And I agree with the GP. I'm fairly cynical about most developers' security stance and threat model. Source: my own usage patterns.)

▲

iamflimflam1 5 hours ago | parent | prev | next [-]

I think you should clarify that with “most programmers I work with”.

▲

shuwix 4 hours ago | parent [-]

He should clarify that "most" can be easily replaced by "all" as it was determined by statistical pool of whopping 1 person - himself.

And also clarify that it's all lie. He just want to tell the anonymous crowd "look, I'm better than you".

▲

shaky-carrousel 3 hours ago | parent [-]

You should also clarify that you pulled your statements out of your butt to look edgy. Everyone in every team I worked for the last ten years use docker. Docker is old tech. If you and your cavemen devs ignore what it is, that's your problem.

▲

shuwix 2 hours ago | parent | next [-]

I hit the nail hard considering you went ballistic.

Keep making up stories how you use best practices only and do everything by the book.

I bet my testicles that in similar fashion, you are lecturing others on IAM while you store credentials in notepad and swnd it via mail. And lectures about backup, RTO, RPO, while you don't have any systematic backup and never heard about use of geographicaly isolated backup, or WORM.

	▲	kelnos 32 minutes ago \| parent [-]
		I don't think the GP said anything about their own practices, just their impression of the majority of devs. Maybe turn down the temperature on your vitriol a bit?

▲

_joel 3 hours ago | parent | prev [-]

Docker is old tech, yes, doesn't mean every dev in the world uses it. They don't. Jails/zones are even older (hell a chroot). Did developers all use those before due to them being 'old tech'. No.

▲

Izmaki 5 hours ago | parent | prev [-]

In my experience more than 9/10 programmers I've worked with have never used Docker before and of those who have, the majority have never used Docker for anything personal.

If I hand them an image for a Dev Container, sure, they might use it, but it becomes "a thing we need to do, to compile our code in our IDE" not a tool they would use for isolation*.

*) OP seemed to imply that containerization would be nice for safety and security compared to bare metal, but containers were never built for isolation in the first place, mind you. They are namespaces and chicken-coop-like-jails at best.