| ▲ | apothegm 13 hours ago | ||||||||||||||||||||||||||||||||||
If it’s allowed to write any sort of scripts, it will find a way to execute arbitrary code. If it’s got access to any form of internet connection it will find a way to use that arbitrary code to do as it wishes with that connection. So much for sandboxes. And that’s setting aside “sandboxes” that are just instruction-based restrictions on what executables may be called. Anything that isn’t a deterministic external filter _will_ be ignored at some point. | |||||||||||||||||||||||||||||||||||
| ▲ | mdspan 13 hours ago | parent [-] | ||||||||||||||||||||||||||||||||||
Arbitrary network access can be mitigated with a firewall (ideally several). Arbitrary code isn't really an issue in this context. | |||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||