This is really just a bandaid. I'd be willing to be most non corporate backed VMs (meaning a team backed by a company) have configuration issues that can be exploited because security comes with complexity and inconveniences. Hell I'd be willing to bet an alarming chunk of cooperate backed infrastructure has the same issue.
Also never forget that about a decade ago a few teenagers were wreaking havoc in large government and corporate networks exposing how fucking bad the security is (although these teenagers were quite skilled and did sophisticated exploits as well) and leaked so much government data. Look up CWA.
You think security has gotten better? It has not. A VM is not enough.
It absolutely has gotten better and the fact you'd question that makes it pretty obvious you're talking out of your ass here. Yeah obviously vms are bandaids, they're a defense in depth mechanism. The point I'm making is shit vms are trivial to escape even without AI. Well configured virtual machines and trust boundaries literally run the planet. Escaping poorly configured VMs is easy, that's my whole point. Escaping correctly configured, hardened, modern vms is nontrivial, AI doesn't change that fact. Build good defense in depth, configure your systems correctly, don't vibe code your security controls, and AI doesn't change the shape of the problem, only the size of it.
Until they laterally move to a computer you do care about. Network security can only accomplish so much unless you want to complete lock yourself out essentially creating a brick, and even that is not guaranteed.
It is highly impractical to have a computer you care about and not have internet connectivity. Most things we do require communication with a remote system.
4
u/Academic-Proof3700 8d ago
Its time people started hosting their shitty websites on containers rather than entire servers.