POST: you probably don't need hardened container images when you can already secure what you have.

[pombredanne]

From @prabhu
Blog proposal: you probably don't need hardened container images when you can already secure what you have.

[prabhu]

That's the full post. Ready to publish!

[pombredanne]

I am not sure I get your point there, it may need to be fleshed out to make sense :]

• explain securing what you have?
• hardened container images? tell me more

etc.

[prabhu]

Hardened container images, especially packages rebuilt from source by the finest engineers handpicked to work for the greatest security companies, are the new hype of the month. Multiple commercial vendors are pitching these as miracle cures, and unlike the pharma industry, no proof or evidence is required for any security claims. It is analogous to claiming that all brick houses with windows and doors are unsafe and that we all should switch to houses made of sticks (since they're lightweight with less attack surface), without thinking these can be huffed, puffed, and blown away.

So the blog could talk about how any house or village could stay safe with basic precautions and safety tips - securing what we already have, rather than switching to a new hype, outsourcing security, and praying it's all safe and secure.