“If you have access to the Internet, you're not sandboxed.”
The Backend Engineering Show with Hussein Nasser · Hands-On Engineering Podcasts · August 2026
Nasser is working through the report that OpenAI's agents found vulnerabilities in Hugging Face, and objecting to the word sandbox. His point is that a Kubernetes cluster with outbound internet access is one hop away from everything else, whatever it is called. He follows it with: Have you not heard of a DMZ before, guys?
Transcript
if they're acting like a worm or something, right? It's like, come on, talk
technical, guys.
…Kubernetes cluster, to create another container or to access other containers that had access. That was awesome. And maybe I'm wrong about that part. It's either created another container or accessed the next container that has full access to the internet. But in summary, is this a sandbox, in your opinion? Having a Kubernetes cluster that has access to the Internet? In my opinion, that's not. If you have access to the Internet, you're not sandboxed. It's just like one hop. Have you not heard of a DMZ before, guys? Right? It's like this meme where we have, oh, agents broke out and there's this door with a Cheetos as a lock. That's exactly what it feels like. It's like, yeah, you put the Cheetos and the agents broke out. Of course they did. Oh my God. Yeah. So that. So there are some amazing things here, but I don't think any of this stuff a…