Comment by winstonwinston

> This is hyperbolic; the agents were only able to access the internet by finding a zero-day in the internal Artifactory instance that was providing package access for the agents. The sandbox could and should have been better, but it was not as weak as it could have been.

Like we all forgot how sandboxing is done for decades. This brokered thing they call sandbox is not it.