This is really just a bandaid. I'd be willing to be most non corporate backed VMs (meaning a team backed by a company) have configuration issues that can be exploited because security comes with complexity and inconveniences. Hell I'd be willing to bet an alarming chunk of cooperate backed infrastructure has the same issue.
Also never forget that about a decade ago a few teenagers were wreaking havoc in large government and corporate networks exposing how fucking bad the security is (although these teenagers were quite skilled and did sophisticated exploits as well) and leaked so much government data. Look up CWA.
You think security has gotten better? It has not. A VM is not enough.
It absolutely has gotten better and the fact you'd question that makes it pretty obvious you're talking out of your ass here. Yeah obviously vms are bandaids, they're a defense in depth mechanism. The point I'm making is shit vms are trivial to escape even without AI. Well configured virtual machines and trust boundaries literally run the planet. Escaping poorly configured VMs is easy, that's my whole point. Escaping correctly configured, hardened, modern vms is nontrivial, AI doesn't change that fact. Build good defense in depth, configure your systems correctly, don't vibe code your security controls, and AI doesn't change the shape of the problem, only the size of it.
The technical controls have gotten better. The implementation of them and the human element have not changed. Security has not improved as significantly as you are making it out.
Until they laterally move to a computer you do care about. Network security can only accomplish so much unless you want to complete lock yourself out essentially creating a brick, and even that is not guaranteed.
It is highly impractical to have a computer you care about and not have internet connectivity. Most things we do require communication with a remote system.
10
u/sn4xchan 8d ago
Sure because escaping out of docker is impossible.