logoalt Hacker News

catlifeonmars • today at 4:12 AM • 1 reply • view on HN

GP said

> They ran it without a jailer

And you said

> getting code execution behind the jailer is still effectively game-over

So I’m really confused, which is it?


Replies

tptacek • today at 4:31 AM

Both, maybe? I mean: whether or not they broke the jailer, we know the jailer is breakable; it wouldn't really even be newsworthy to have an LPE that breaks the Firecracker jailer.

➕ show 2 replies