> The models were running in an agentic sandbox with terminal access (and the ability to edit files within their environment)
> We know that the agents had access to /etc/hosts and the ability to edit this (used this to avoid the POST request restriction)
We see that the agents can call curl and run setsid.
How is this a bypass of sandbox restrictions, exactly? The ability to edit was always there that means the sandboxes were already allowed to do those actions.
I hate it when people write "bypassed" the sandbox so frivolous ly.
> We know that the agents had access to /etc/hosts and the ability to edit this (used this to avoid the POST request restriction) We see that the agents can call curl and run setsid.
How is this a bypass of sandbox restrictions, exactly? The ability to edit was always there that means the sandboxes were already allowed to do those actions.
I hate it when people write "bypassed" the sandbox so frivolous ly.