2 ms·
Container escapes can however be quite easy... There are tons of known exploits. Containers are not secure in the first place. In any case even if you're using
by podocarp 29d ago
Container escapes can however be quite easy... There are tons of known exploits. Containers are not secure in the first place. In any case even if you're using VMs or bare metal, it is all for moot if you have poor networking set up like in this case, because escaping is not the hard part. An attacker doesn't really need to escape if they can scan your whole network and call other endpoints etc. like in this case.
- simonw 29d agoBoth Anthropic and OpenAI have consumer facing products that depend on their ability to run code in a container without falling victim to container escapes - Claude and ChatGPT both use containers as part of regular chats.
- amonks 29d ago> Container escapes can however be quite easy This is certainly true of docker-style container setups where the host kernel is shared directly with other tenants, but it seems to me like a bold claim to make of gvisor as used by these systems.
- podocarp 29d agoFair enough, I kind of assumed their sandbox was just some generic container or bwrap thing everyone uses for agents nowadays