hn • r/hackernews
Comment on: Pacing model development in an era of cyber-critical capabilities
Has any model managed to escape Firecracker? Maybe through KVM, but that already requires privilege in the VM, right?I personally feel that we already have the technology required to contain AI, it's just poorly leveraged. Tools like gvisor have existed for ages but are rarely deployed, Firecracker has existed for ages but is rarely deployed, seccomp has existed for ages but is rarely deployed, memory safe languages without decades of serialization vulns have existed, capability-safe libraries have existed, iframe sandboxing, trusted types, content security policy, network ACLs, isolating prox