New top story on Hacker News: You can't contain me: elevation-of-privilege vulnerability in Docker for Windows
