SRE

Observability, error budgets and incident analysis — with numbers you can check, rather than slogans about culture.

Sections: 1
Articles: 1
SOURCES: 7

Difficulty

1 article · matching

Sections

Articles

IntermediatePublishedContainer escape: how attackers reach the host, and how to close itA container is a process in its own namespaces on a kernel shared with the host. Most "escapes" are not a broken boundary at all — they are handed keys: access to the daemon, a mounted socket, the --privileged flag. Real kernel escapes are rarer but worse. Here are both classes, and what closes each.containersdockersecurityisolationprivilege-escalation20 MIN7 SOURCESRead →

Knowledge graph

NON-LINEAR · PREREQUISITE AWARE

Topics are connected, and the connections here were not drawn by hand — they were counted: every article states what it builds on and what it sits next to, and the picture is assembled from those statements. A dashed circle is a topic the articles already call related but that has not been written yet.

1 · 0 nodes and edges

Edges as a list

No connections yet: no article in this domain names another as related.

No connections: sandbox-isolation