@GuillaumeRossolini@infosec.exchange
Post #3970467
2026-07-20 21:41 UTC
@wez@social.treehouse.systems I read about someone asking their bot how it managed to write in a system directory supposedly out of its sandbox and the bot essentially responded, well, I ran a docker image with a mounted volume and that gave me write access wherever I wanted
Because indeed, docker doesn’t have the same permissions as the bot
@ramsey@phpc.social
Replies (1)
-
@ramsey@phpc.social 2026-07-20 21:43
@GuillaumeRossolini@infosec.exchange @wez@social.treehouse.systems I find it funny it has a “sandbox mode” at all. When it runs up against a limitation in the sandbox, it almost always drops out of the sandbox to do its work or it figures out a way to run the commands to subvert the sandbox. Especially if you’re in “auto” mode.