Remix.run Logo
charcircuit 3 hours ago

If you have ssh installed, with network access it can ssh localhost to escape the sandbox.

qwertox 3 hours ago | parent | next [-]

You can consider these agents criminals, or treat them like babies. Both can do harm for a while, but one offers a future.

senko 3 hours ago | parent | prev | next [-]

Don't give it access to your ssh keys!

charcircuit 2 hours ago | parent [-]

Yes, it should have its own dedicated key instead of sharing one of your own.

dist-epoch 3 hours ago | parent | prev [-]

`ssh localhost` doesn't work for me. maybe because I have enabled only key-based ssh and my user key is not in authorized_keys? am I missing something?

charcircuit 2 hours ago | parent [-]

You are right in that it would still need to authenticate.