Leaky Vessels deep dive: Escaping from Docker one syscall at a time

Breaking container isolation by racing the filesystem The Snyk Security Labs team recently embarked on a research project into the Docker engine. During this project, I had the opportunity to perform what is arguably my favorite kind of research usin...