GKE-Sandboxed containers prevent their first kernel vulnerability | Hacker News Reader