2 ms·
If it’s allowed to write any sort of scripts, it will find a way to execute arbitrary code. If it’s got access to any form of internet connection it will find a
by apothegm 16d ago
If it’s allowed to write any sort of scripts, it will find a way to execute arbitrary code. If it’s got access to any form of internet connection it will find a way to use that arbitrary code to do as it wishes with that connection. So much for sandboxes.
And that’s setting aside “sandboxes” that are just instruction-based restrictions on what executables may be called. Anything that isn’t a deterministic external filter _will_ be ignored at some point.
- mdspan 16d agoArbitrary network access can be mitigated with a firewall (ideally several). Arbitrary code isn't really an issue in this context.
- Numerlor 16d agoYep put some deep packet inspection firewall in front of it and stop it completely if it starts acting up persistently before it starts trying to bypass the firewall