Comment by desterothx

2 days ago

Well making an actual sandbox before testing offensive abilities of their supposedly _really dangerous model_ would have been nice...

1 comment

desterothx

nananana9 2 days ago

They probably did, and it probably went along these lines:

> Very dangerous model, please implement an unescapable sandbox.

> Certainly, here's an unescapable sandbox!

  function execInUnescapableSandbox(cmd) {
    if (cmd.split()[0].startsWith("cd") && !cmd.split[1].startsWith("/sandbox"))
       throw new Error("[usbox] Rejected!");
    exec(cmd);
  }