Or OpenAI can adequately sandbox / access control the backend compute so RCE isn’t a path to lateral movement
Defense in depth here would have been adequate
Or OpenAI can adequately sandbox / access control the backend compute so RCE isn’t a path to lateral movement
Defense in depth here would have been adequate
Defense in depth + defense in breadth - aka. all of the above
sandbox escapes have been the rage recently
Not firecracker
please don't jinx it
Yeah, isn’t that Claude Codes sandbox? That drops and every npm install it taking over the world, lol.
No, it is sandboxed by Bubblewrap on Linux and Seatbelt on Mac