| ▲ | catlifeonmars 6 hours ago |
| GP said > They ran it without a jailer And you said > getting code execution behind the jailer is still effectively game-over So I’m really confused, which is it? |
|
| ▲ | tptacek 6 hours ago | parent [-] |
| Both, maybe? I mean: whether or not they broke the jailer, we know the jailer is breakable; it wouldn't really even be newsworthy to have an LPE that breaks the Firecracker jailer. |
| |
| ▲ | stogot 6 hours ago | parent | next [-] | | Did they break the jailer? I thought from these comments they disabled it. then the breach happens in KVM? Isn’t KVM its own software repo, and firecracker sits on top? How is this firecracker and not a KvM thing | |
| ▲ | tclancy 5 hours ago | parent | prev [-] | | I deeply love my idiot comment about not using password for your password generated useful stuff. Kudos to everyone here who rescued my idiocy. Now to change my luggage combination. |
|
