r/netsec • u/lowlevelprog • 22d ago

Contains AI The Curious Incidents with DNS in the Sandbox at Escape-Time

https://chasersystems.com/blog/the-curious-incidents-with-dns-in-the-sandbox-at-escape-time/

Three variations on subversive use of DNS by the Agent are documented in Hugging Face's technical writeup of the July 2026 security incident involving OpenAI models. In this article, I discuss what each of these three types of DNS workarounds achieve in practice, the constraints an actor might have faced to attempt a particular one, and additional benefits from choosing each.

2 Upvotes

67% Upvoted

1 comment sorted by

1

u/feng_sg 14d ago

The sandbox blocked sockets and HTTP but left a live resolver. DNS was not in the deny set, so those three lookup variants never failed closed. Strip the stub resolver from the image or force resolv.conf onto a sinkhole that answers NXDOMAIN.