Whatever You Do, Don't Expose the Docker Socket to a Container (2015) | Hacker News Reader