6 ms·
You're not explaining why the trifecta doesn't solve the problem. What attack vector remains?
by winternewt 10mo ago
You're not explaining why the trifecta doesn't solve the problem. What attack vector remains?
- TeMPOraL 10mo agoNone, but your product becomes about as useful and functional as a rock.
- kccqzy 10mo agoThis is what reasonable people disagree on. My employer provides several AI coding tools, none of which can communicate with the external internet. It completely removes the exfiltration risk. And people find these tools very useful.
- TeMPOraL 10mo agoAre you sure? Do they make use of e.g. internal documentation? Or CLI tools? Plenty of ways to have Internet access just one step removed. This would've been flagged by the trifecta thinking.
- kccqzy 10mo agoYes. Internal documentation stored locally in Markdown format alongside code. CLI tools run in a sandbox, which restricts general internet access and also prevents direct production access.