Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

That's only fine if you know all code running in all parts (containers) on the same hardware node. Code running on one container can influence data/code from other containers. (When some third-party has a form of code execution)


Privilege-aware scheduling could colocate only same-container (or same-user, or same-process) threads on HT pairs.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: