This is a really enjoyable write up! It’s basically leveraging docker’s platform to broaden an attack surface for more potential victims. But ultimately it has nothing to do with docker technology itself, if I understand correctly