Replit CEO Amjad Masad Shares Sandbox Security Advice: Assume Zero-Days, Use Layered Zero-Trust
English summary
Replit CEO Amjad Masad tweeted that many AI companies and sandbox providers make basic errors in sandbox security. He noted that Replit has been running sandboxes since 2016 and has been targeted by hackers and state actors. Masad's main advice is to assume zero-day vulnerabilities exist and to build defenses with layers of protection in a zero-trust framework, linking to a detailed post on the topic.
Chinese summary
Replit 首席执行官 Amjad Masad 在推文中指出，许多人工智能公司和沙盒提供商在沙盒安全性方面犯了基本错误。他提到 Replit 自 2016 年以来一直在运行沙盒，并遭到黑客和国家行为体的攻击。Masad 的主要建议是假设零日漏洞存在，并在零信任框架中建立分层防护，他还附上了一篇详细文章的链接。
Key points
Many AI companies and recent sandbox providers are making basic security mistakes.
许多人工智能公司和最近的沙盒提供商正在犯基本的安全错误。
Replit has operated sandboxes since 2016, surviving attacks from hackers and state actors.
Replit 自 2016 年起运营沙盒，经受住了黑客和国家行为体的攻击。
The core security advice: assume zero-days exist and employ a layered zero-trust architecture.
核心安全建议：假设零日漏洞存在，并采用分层零信任架构。