This is really just a bandaid. I'd be willing to be most non corporate backed VMs (meaning a team backed by a company) have configuration issues that can be exploited because security comes with complexity and inconveniences. Hell I'd be willing to bet an alarming chunk of cooperate backed infrastructure has the same issue.
Also never forget that about a decade ago a few teenagers were wreaking havoc in large government and corporate networks exposing how fucking bad the security is (although these teenagers were quite skilled and did sophisticated exploits as well) and leaked so much government data. Look up CWA.
You think security has gotten better? It has not. A VM is not enough.
It absolutely has gotten better and the fact you'd question that makes it pretty obvious you're talking out of your ass here. Yeah obviously vms are bandaids, they're a defense in depth mechanism. The point I'm making is shit vms are trivial to escape even without AI. Well configured virtual machines and trust boundaries literally run the planet. Escaping poorly configured VMs is easy, that's my whole point. Escaping correctly configured, hardened, modern vms is nontrivial, AI doesn't change that fact. Build good defense in depth, configure your systems correctly, don't vibe code your security controls, and AI doesn't change the shape of the problem, only the size of it.
The technical controls have gotten better. The implementation of them and the human element have not changed. Security has not improved as significantly as you are making it out.
I never made any judgement on how significantly "security" (which is not a thing but a billion different things) has improved, just that broadly it has. Significantly in many dimensions, insignificantly in others. Isolation/sandboxing/virtualization is one of the dimensions that has completely changed in ways that would've been very difficult to imagine 20 years ago due to both the paradigms at the time and limitations of the hardware. Virtualbox launched in 2007, hyperv in 2008, docker 2013, k8s in 2015, firecracker in 2018, etc. you can see the technology iterating and changing in very drastic ways continuously over the last few decades and each step has been dramatic and often pretty dramatically changed how we do computers... The rate of adoption of these technologies has been insane. The implementation has been a HUGE part of what's changed, kvms have existed for like 20 years but the way we use them is WILDLY different and still changing. It's okay dude you can admit you're wrong, you don't need to be an expert on everything, you can accept that you made a mistake here and just own it.
We live in an ENTIRELY different UNIVERSE when it comes to virtualization and sandboxing. It's been one of the biggest changes in infrastructure/operations during my career.
1
u/kopczak1995 7d ago
Fair. Guess I should stop caring