logoalt Hacker News

KingOfCoders • yesterday at 5:48 PM • 2 replies • view on HN

How can it escape an "install package <x>" proxy?

   reducePrivs()
   serve get(package) { 
     secPackage = secure(package)
     getBinaryFromArtifactory(secPackage)
   }
I would think the code is very small and easier to verify, it doesn't especially have the ability to write files and act as a message board as Artifactory did.

And even if the agent tries to hack that, the attack surface is 1000x smaller and the possibility also much smaller.

But I'm not a security researcher, would love to see your hack to learn something (because that is what I do to sandbox agents that need services).

Replies

angry_octet • today at 1:09 AM

The way they had Artifactory configured was poor, and they were too reliant on it working perfectly, with no reason for such faith. Their config lacked any defence in depth and consideration of having a small TCB.

Part of the problem might be the lack of security focus, as these are AI R&D efforts first.

➕ show 1 reply
hoten • yesterday at 6:12 PM

I mean, it's just the same problem. The machine still has Internet access. It doesn't need to.

The entire package manager repository could just be in an offline cache. They don't need Internet to give their agents access to tons of software.

➕ show 2 replies