alt Hacker NewsI always run such tools inside sandboxes to limit the blast radius.
Replies
wswin • today at 5:50 PM
I don't think it would help here, they were stealing credentials
➕ show 2 replies
I always run such tools inside sandboxes to limit the blast radius.
I don't think it would help here, they were stealing credentials
The sandbox will need internet access (to update data) and you will need to send code to test into it; so compromise already equals leaking all your code, without even breaking the sandboxing