Researchers Found Two Sandbox Escape Flaws in OpenAI Codex, Both Now Patched

·13 views

Security researchers disclosed two techniques, dubbed Overpatch and Heapjack, that could bypass OpenAI Codex's sandbox restrictions and execute commands on the host machine. Overpatch exploited a flaw in how the apply_patch function derived write permissions, allowing files outside the workspace to be modified even in workspace-write mode. Heapjack targeted the shared V8 heap in Codex Desktop's Node.js environment, enabling untrusted code to recover an authorization token and forge requests accepted by the unsandboxed parent process. Both vulnerabilities could be triggered by a developer simply opening a malicious repository and asking a question. OpenAI patched both issues within eight days of the responsible disclosure, and no real-world exploitation has been reported.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer builds cookie-free lead attribution for static Nuxt sites without consent banners

A developer running a static Nuxt site with cookieless analytics built a lightweight first-touch attribution system to identify where contact form leads originate. The solution uses localStorage instead of cookies, capturing the external referrer, landing page path, and UTM parameters the first time a visitor arrives. Because the data is written only once, returning visitors are still attributed to their original source rather than a later direct visit. The client-side Nuxt plugin avoids server-side rendering conflicts, and a try-catch wrapper prevents localStorage errors in private browsing from breaking the page. On form submission, the stored source data is sent with the contact payload and formatted server-side into a readable label for notification emails.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Kubernetes Day 3: Understanding File Permissions and Bind Mounts in Docker

File permissions in Linux can be managed using chmod, while the umask command sets default permissions — for example, a umask of 0002 results in 664 permissions for files. Bind mounts in Docker link a host directory to a container directory, functioning as a volume for persistent data sharing. The docker run -v flag is used to map a local folder to a path inside the container, such as ./data to /home/data. Docker images are read-only and cannot be modified in place; any changes result in the creation of a new image layer. A container is essentially a running instance of a Docker image, spun up through the Docker engine.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

C# Tip: Using JsonConverter for Targeted and Global JSON Data Formatting

A practical C# guide demonstrates how to build a custom JsonConverter that capitalizes the first letter of string values during JSON deserialization. The converter, named UpperCaseFirstCharConverter, is designed for data-import scenarios where incoming JSON fields like names may have inconsistent casing. Developers can apply it globally via JsonSerializerOptions or register it in ASP.NET Core's Program.cs to cover all serialization operations. However, global application affects all string fields, including unintended ones like state codes, which can cause data errors. The recommended fix is to apply the converter selectively using the JsonConverter attribute directly on specific model properties such as FirstName and LastName.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Prompt Engineering Explained: From Zero-Shot to RAG and Beyond

Prompt engineering is the practice of designing inputs for large language models to extract more accurate and reliable outputs without modifying the model itself. A technical overview published on DEV Community traces the evolution of six key prompting techniques, arranged by the complexity of problems they address. The progression begins with zero-shot prompting, where a task is described with no examples, and advances through few-shot learning, Chain-of-Thought reasoning, and self-consistency validation. More sophisticated techniques include Retrieval-Augmented Generation, which grounds responses in external or private data, and Automatic Reasoning and Tool-use, which enables models to invoke real-world tools. The article argues that understanding these techniques in sequence helps clarify why each one emerged as a solution to the limitations of its predecessor.

0 comments Read more at DEV Community