Breaking the Box: Tunneling out of AI Sandboxes

About this talk

AI coding assistants are increasingly running our code in hosted sandbox environments. But how secure are these black boxes? I built an ecosystem called tunnel.pizza to find out. By adding a simple startup script to a major AI platform's code environment, I was able to spawn a reverse shell and get a live bash console directly into their infrastructure. This talk demonstrates the mechanics of this reverse shell, how to interactively explore hosted execution environments, and what security teams need to know to defend against untrusted compute access.

The speaker

• CN

  Christian Nuss

Where it is