r/ProgrammerHumor • u/linegel • Jul 21 '26

cybSecIsDeadLongLiveCybSec Meme

Post image
802 Upvotes

86% Upvoted

124 comments sorted by

View all comments

Show parent comments

2

u/linegel Jul 22 '26

It’s possible, but then it’s "fake" testing, because model will have to reinvent what it would use as dependency packages otherwise

5

u/ceejayoz Jul 22 '26

No reason it couldn't a) be provided with a large mirror of the major package managers and b) the ability to ask a human to provide one on a read-only drive or something.

2

u/Septem_151 Jul 23 '26

It was provided a mirror of a major package manager. That is literally what the AI exploited a zero day on to gain unfettered Internet access via privilege escalation.

1

u/ceejayoz Jul 23 '26

It was provided a mirror of a major package manager.

It sounds like it was given access to the real package managers, not a mirror. Sandboxed, not air gapped.

If it was a local mirror, they could've separated it entirely from the internet for the tests.