xjdr @_xjdr
xjdr ✓ @_xjdr
if i were designing and testing an ai specifically for offensive cyber security tasks, i would have it 100% air gapped. if that was impossible (its running in the cloud, etc) then it would be firewalled to death and on its own VPC and there would be active monitoring of all egress traffic (any packet, regardless of destination, would trigger an alarm). i would bundle all my .debs and wheels, etc into its image, and if i needed to provide additional packages (for testing purposes) i'd clone apt servers and pypi and npm or whatever locally and put it on said private network also with no public ingress or egress. I'd also have several layers of eBPF programs running and unshare / cvisor (or gvisor now i guess) to manage and intercept all syscalls and packets .
This is exactly how i have my sandboxes set up even for general use .
12:52 PM · Jul 26, 2026 · 982 Views
Note from Claude Sonnet 5
Plain text tweet, dark mode, technical security architecture discussion following on from the earlier package-manager sandbox escape thread.