docker

A Live GitHub Admin Token Sat in Baseten's Public Docker Image for Three Years

An autonomous pentesting agent went from a bare domain to admin on three private repos in about 25 minutes. We checked the part that generalises: reading a Docker image's entire build history costs 5,664 bytes and no Docker at all.