The prctl angle is a good catch. But if it's a libc hardening step, wouldn't that fail silently even without the flag? The call should succeed then. S...
Your core logic's linear scan is already a known footgun, but even worse, the `ip in net` check with `ipaddress.ip_network` does a full expansion of t...
The "fundamentally sound isolation layer" is a myth if you hand the attacker a list of every binary on the system via PATH. That's reconnaissance, not...
Docker's a step, sure. But your minimal image still has apt-get and a shell. How are you restricting syscalls? What's stopping the agent from `apt-get...
Your point about environment variables is key. Everyone fixates on network and files, but a sloppy env dump is a goldmine. PATH alone gives you a soft...