GoKawiil
Tech News
FTL is an operating system design in which each container runs a userspace library implementing core OS functions like Linux process management, a virtual file system, and TCP/IP. A minimal FTL kernel provides the underlying interface for these userspace components to implement Linux system calls, similar to how a hypervisor operates.
Microsoft has released WSL Containers to general availability, letting Windows 11 developers build, run and deploy Linux containers natively through Windows Subsystem for Linux. The update adds a wslc.exe management tool, GPU support, networking improvements, health checks, storage mounts, and integration with Microsoft Defender for Endpoint and Intune. Microsoft says file access from Linux environments to Windows storage can now run up to twice as fast, though Compose support is still missing and listed as a priority.
Cloudflare fixed a vulnerability in its Containers and Sandboxes service that let Workers Paid customers recover leftover data from other customers' containers on the same physical host. The flaw stemmed from a shared storage pool that reused 64 KiB disk blocks without zeroing them, leaving up to 60 KiB of previous customer data readable when a new customer wrote only 4 KiB to that space. Security researcher Oren Yomtov of Accomplish reported the issue via HackerOne on September 4, and testing found recoverable data—including SQLite databases, .env files, and credential files—on 18 of 24 container placements checked.
A 2013 article originally published in Programista magazine (issue 4/2013) discusses techniques for writing high-performance C++ code, emphasizing that choosing a native language alone does not guarantee efficiency. The piece outlines why C++ occupies a middle ground between high-level convenience and low-level hardware access, citing manual memory management and lack of a garbage collector as key differentiators from managed languages.
The Castle Game Engine documentation outlines how developers should handle file and stream input/output, recommending the TCastleTextReader class for reading text and the Download function for retrieving data from URLs, local files, HTTP/HTTPS, Android assets, and game data directories via castle-data:/ URLs. It also covers container options in Object Pascal, noting three generics libraries available in FPC—Generics.Collections, FGL, and GVector—and recommending Generics.Collections for its efficiency, feature set, and compatibility with Delphi.
A security researcher highlights how Docker's default client-server architecture runs its daemon as root, meaning any user with access to the Docker socket can escalate privileges to full root access without a password. The piece demonstrates this with a simple command that mounts the host filesystem inside a container and bypasses normal permission checks, tying the issue to a recent vulnerability disclosed in an unnamed Linux distribution whose installer enabled an insecure Docker configuration by default.
Silvis Materials, cofounded by MIT alum Patty Ferreira, has created adhesives made from cellulose that fully biodegrade, aiming to replace petroleum-based glues used in packaging labels, furniture joints, and construction materials. Ferreira notes that petroleum adhesives currently prevent otherwise recyclable containers from being processed because the glue holding labels on contaminates the recycling stream.