Hi all, I'm a maintainer of Docker. As others already indicated this doesn't work on 1.0. But it could have.

Please remember that at this time, we don't claim Docker out-of-the-box is suitable for containing untrusted programs with root privileges. So if you're thinking "pfew, good thing we upgraded to 1.0 or we were toast", you need to change your underlying configuration now. Add apparmor or selinux containment, map trust groups to separate machines, or ideally don't grant root access to the application.

Docker will soon support user namespaces, which is a great additional security layer but also not a silver bullet!

When we feel comfortable saying that Docker out-of-the-box can safely contain untrusted uid0 programs, we will say so clearly.

The market positioning here seems very un-Amazon.

"Your margin is my opportunity" is probably my favorite Bezosism. Given that perspective and Apple's very cushy margins, I expected Amazon not to approach the market with an expensive phone packed with new features, but to approach the market from the bottom, with a good phone that is free or nearly free. The problem, of course, is that Google seems to have that segment wrapped up.

Instead of competing with the iPhone, this seems to more targeted at Android -- only priced uncompetitively.

The features themselves seem slightly gimmicky. I tend not to want to move my phone physically as a way to interact with apps. (Doing that figure "8" when my GPS goes out for some reason is incredibly awkward.) Searching via photos is awesome, but the only use case it seems well suited for is shopping. The built-in Genius Bar is cool, but it seems targeted toward smartphone noobs, which is oddly coupled with features targeted to smartphone pros.

If I'm reading the tea leaves correctly, this will probably be a novelty, like Windows Phone, for a while to come.