Remix.run Logo
khalic 6 hours ago

The standard here is not enough when the agent can escalate by finding 0 days, for example. It’s like giving a black hat a limited account. Sure it might restrict him, but not giving him an account at all is way better

gowld 6 hours ago | parent [-]

The black hat can find 0-day escalation in your sandbox, too.

A user account is a sandbox.

khalic 6 hours ago | parent [-]

Not as air tight as a container

Edit: it’s about the attack surface

chrisweekly 6 hours ago | parent [-]

microvms are better than containers running on your host. see eg the "smolvm" microvms from https://smolmachines.com

khalic 6 hours ago | parent [-]

thanks, will take a closer look