3 ms·
Given it’s running in a locked-down container: there’s no reason to restrict it to Python anyway. They should parter/use something like replit to allow anything
by jasonthorsness 2y ago
Given it’s running in a locked-down container: there’s no reason to restrict it to Python anyway. They should parter/use something like replit to allow anything!
One weird thing - why would they be running such an old Linux?
“Their sandbox is running a really old version of linux, a Kernel from 2016.”
- simonw 2y agoYeah, it's pretty weird that they haven't leaned into this - they already did the work to provide a locked down Kubernetes container, and we can run anything we like in it via os.subprocess - so why not turn that into a documented feature and move beyond Python?
- Yoric 2y agoHow locked is it? How hard would it be to use it for a DDoS attack, for instance? Or for an internal DDoS attack? If I were working at OpenAI, I'd be worrying about these things. And I'd be screaming during team meetings to get the images more locked down, rather than less :)
- simonw 2y agoIt can't open network connections to anything for precisely those reasons.
- asadm 2y agoI am pretty sure it's due to model being able to writing python better?
- rfoo 2y ago> why would they be running such an old Linux? They didn't. OP misunderstood what gVisor is, and thought gVisor's uname() return [1] was from the actual kernel. It's not. That's the whole point of gVisor. You don't get to talk to the real kernel. [1] https://github.com/google/gvisor/blob/c68fb3199281d6f8fe02c7d01a3c00d900aeb870/pkg/sentry/syscalls/linux/linux64.go#L36 https://github.com/google/gvisor/blob/c68fb3199281d6f8fe02c7...
- thundergolfer 2y agoIt’s running gVisor which currently reports its kernel version as 4.4.0, even though it’s actually implementing a much more recent version of Linux. I know this because at Modal.com we also use gVisor and our users occasionally ask about this.