Sandboxes are 3 abstraction layers from physical hardware probes
HanchungLee · x · 2026-09-18
Hanchung Lee explains why sandboxed environments can't sense physical hardware: datacenters don't run on bare metal. VMs like EC2 run on hypervisors, k8s runs on the OS, and sandboxes run on VMs or k8s — three layers of abstraction away from any physical probe.
More from Safety
- Australia proposes law forcing AI companies to report rogue incidents by early 2027 — gaganghotra_ · 2026-09-18
- Martin Casado on Noam Brown's air-gap warning: covert channels are an old, understood problem — tszzl · 2026-09-18
- HEIF Heist: one image parser bug class hits OpenAI, Slack, Meta, GitHub Enterprise with RCE — Miles_Brundage · 2026-09-18
- Commentary: orgs still treat AI like SaaS, and SaaS security posture is terrible — soumitrashukla9 · 2026-09-18
- David Sirota: AI CEOs will make products safe only when jail and bankruptcy loom — michael_nielsen · 2026-09-18
- Air-gapped AI exfiltration debate: no bits move without a matching receiver stack — basedjensen · 2026-09-18