Technology

378 readers

1 users here now

This magazine is dedicated to discussions on the latest developments, trends, and innovations in the world of technology. Whether you are a tech enthusiast, a developer, or simply curious about the latest gadgets and software, this is the place for you. Here you can share your knowledge, ask questions, and engage in discussions on topics such as artificial intelligence, robotics, cloud computing, cybersecurity, and more. From the impact of technology on society to the ethical considerations of new technologies, this category covers a wide range of topics related to technology. Join the conversation and let's explore the ever-evolving world of technology together!

founded 2 years ago

Thousands of images on Docker Hub leak auth secrets, private keys (www.bleepingcomputer.com)

submitted 1 year ago by wave_walnut@kbin.social to c/tech@kbin.social

3 comments fedilink hide all child comments

Researchers at the RWTH Aachen University in Germany published a study revealing that tens of thousands of container images hosted on Docker Hub contain confidential secrets, exposing software, online platforms, and users to a massive attack surface.

you are viewing a single comment's thread
view the rest of the comments

[–] ComMcNeil@kbin.social 2 points 1 year ago (2 children)

Not sure I understood everything, but it reads as if the image creator added secrets into the image? Wouldn't that be the problem of the image creator, instead of people using the image?

[–] TimeSquirrel@kbin.social 2 points 1 year ago (1 children)

A developer works on a docker image for some sort of server software and puts in a backdoor for testing purposes or leaves some password somewhere defaulted to make things easier for them. Dev forgets about it, and publishes the image. Ten thousand people then download the compromised image and deploy it on Internet-facing servers without a second thought.

[–] ComMcNeil@kbin.social 2 points 1 year ago

Ah, that makes more sense then. Thanks.