As soon as I read that line the article lost all credibility with me. InfoSec is plagued with thought leaders who weigh in without understanding what they're talking about.
Except they're correct. In a proper sandbox a bug in Artifactory wouldn't allow you to access the internet. There was no effectively no sandbox unless you consider Artifactory to be a sandboxing solution, which it's not.
Artifactory should be inside the sandbox, it's not a sandbox in and of itself.
This is exactly the same problem as forwarding ports and exposing all of your internal services to the internet, but from the opposite direction - a bug in any of those services will allow the attacker to gain a foothold inside your network (or in this case, allow the agent to gain a foothold outside of its "sandbox")
I have an Orange Pi running pihole and a few family apps, like a shared calendar / meal plan / todo list info board that I can put up on the TV or show on a mini display on the kitchen.
I have the Codex Linux desktop app running on there and quite enjoy building games on my TV with my kids. We just dictate silly ideas via my phone and codex builds them for us.
Thank god. My primary use of ChatGPT is meal planning and while it’s great for recording, recipe lookup, etc I always just wanted it to be able to make checkable grocery lists.
I eventually just had it make a skill for work mode that would build a mini checklist app, but it was slow and felt janky needing to remember to switch to work mode.
Why not just build the checklist app once, and set up a way to create simple data that the app imports? Or even just have it import from plain text, one item per line?
If you're in an enterprise that already has a procurement agreement with OpenAI, this means you don't have to onboard another vendor. Bucket platform strategy.
