2 ms·
The issue as I understand it is that they didn't expect Artifactory to be vulnerable in the way it was, or else were completely not paying attention. But I'm c
by zahlman 29d ago
The issue as I understand it is that they didn't expect Artifactory to be vulnerable in the way it was, or else were completely not paying attention.
But I'm calling for something stronger than a VM here because we shouldn't rely on the VM being bulletproof just like we shouldn't rely on Artifactory being bulletproof. The access should be controlled at the hardware level. Like, networking on internal LANs only, and the entire thing inside a nice big Faraday cage just in case.
- includenotfound 29d agoThat's just unwarranted at this stage, given model capability and resource constraints. Furthermore, VMs are isolation at the hardware level, particularly through hypervisors. I'd say given current LLM capabilities, it's a reasonable containment.