{"id":123056,"date":"2025-04-02T03:05:15","date_gmt":"2025-04-02T01:05:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/izuchenie-nachinki-sandbox-okruzheniya-ispolzuemogo-v-google-gemini-dlya-zapuska-python-koda"},"modified":"2025-04-02T03:05:15","modified_gmt":"2025-04-02T01:05:17","slug":"izuchenie-nachinki-sandbox-okruzheniya-ispolzuemogo-v-google-gemini-dlya-zapuska-python-koda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/izuchenie-nachinki-sandbox-okruzheniya-ispolzuemogo-v-google-gemini-dlya-zapuska-python-koda","title":{"rendered":"Google Gemini'i sandbox-keskkonna koostisosade uurimine Python-koodi k\u00e4ivitamiseks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Avaldatud tulemused uurimisest, mille eesm\u00e4rk on anal\u00fc\u00fcsida isoleeritud keskkonna turvalisust Python-koodi k\u00e4itamiseks, mida kasutab Google oma chatboti Gemini. Gemini chatbot pakub t\u00f6\u00f6riistu koodi genereerimiseks \u00fclesande kirjelduse j\u00e4rgi ning v\u00f5imaldab Pythonile loodud koodi koheselt k\u00e4ivitada, et vabastada arendaja liigsetest toimingutest selle kontrollimise ajal. Kood k\u00e4ivitatakse isoleeritud keskkonnas, mis on v\u00e4lja l\u00f5igatud v\u00e4listest allikatest ja lubab ainult Python'i t\u00f5lgendi t\u00e4itmist. Keskkonna koostisosade kindlaksm\u00e4\u00e4ramiseks suutsid uurijad k\u00e4ivitada koodi, mis kasutas Python'i osakest os, et skaneerida k\u00f5iki katalooge ja luua failis\u00fcsteemi kaart. <\/p>\n

Erilist huvi tekitas t\u00e4itmisfail \/usr\/bin\/entry\/entry_point, mille suurus oli 579 MB. Selle faili hankimiseks l\u00f5id uurijad skripti, mis edastas sisu j\u00e4rjest v\u00e4ikeste osade kaupa Base64 formaadis. Nad automatiseerisid andmeosade kleepimise Caido t\u00f6\u00f6riistade abil ja said oma s\u00fcsteemis faili koopia. <\/p>\n

Hankitud t\u00e4itmisfaili anal\u00fc\u00fcsimiseks kasutati utiliiti binwalk, mis on m\u00f5eldud failide ekstraheerimiseks, mis on sisseehitatud p\u00fcsivara. Ekstraheeritud andmete seas oli kataloog google3, kusfailinimede p\u00f5hjal oli Python'i kood erinevate komponentidega teenuse t\u00f6\u00f6 tagamiseks, n\u00e4iteks RPC, et suhelda AI mudeli Gemini ja erinevate Google'i teenustega, nagu YouTube, Google Flights ja Google Maps.

\"Google<\/center>
\"Google<\/center> <\/p>\n

Failide sisu uurimine n\u00e4itas, et tegemist ei ole konfidentsiaalse koodiga ja see on Google'i turvateenistuse poolt avalikku kasutusse lubatud. Edasi uurimus paljastas, et dumpis olid proto-failid (Protocol Buffer), millel on spetsiifikad sisemiste andmestruktuuride kohta, mis v\u00f5imaldavad m\u00f5ista andmeedastuse \u00fcksikasju erinevate Google'i teenuste vahel. Avatud proto-failide kogumise kasu on k\u00fcsitav, kuna seitse aastat tagasi olid sarnased proto-failid juba teiste uurijate poolt Google App Engine'ist ekstraheeritud.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0441\u0442\u0438 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Python-\u043a\u043e\u0434\u0430, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Google \u0432 \u0447\u0430\u0442\u0431\u043e\u0442\u0435 Gemini. \u0427\u0430\u0442\u0431\u043e\u0442 Gemini \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u043a\u043e\u0434\u0430 \u043f\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e \u0437\u0430\u0434\u0430\u0447\u0438 \u0438 \u0434\u043b\u044f \u044f\u0437\u044b\u043a\u0430 Python \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u0440\u0430\u0437\u0443 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u0434, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u043e\u0442 \u043b\u0438\u0448\u043d\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u0440\u0438 \u0435\u0433\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435. \u041a\u043e\u0434 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0432 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u0442\u0440\u0435\u0437\u0430\u043d\u043e \u043e\u0442 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u043c\u0438\u0440\u0430 \u0438 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":123057,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-123056","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Uuring putukatest sandbox-kehades, mida kasutatakse Google Gemini-s Python-koodi k\u00e4itamiseks | ProHoster","description":"Avaldatud on uuringu tulemused isoleeritud keskkonna turvalisuse kohta, mida Google kasutab Gemini vestlusrobotis Python-koodi k\u00e4itamiseks.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/izuchenie-nachinki-sandbox-okruzheniya-ispolzuemogo-v-google-gemini-dlya-zapuska-python-koda","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0437\u0443\u0447\u0435\u043d\u0438\u0435 \u043d\u0430\u0447\u0438\u043d\u043a\u0438 sandbox-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0432 Google Gemini \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 Python-\u043a\u043e\u0434\u0430 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0441\u0442\u0438 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Python-\u043a\u043e\u0434\u0430, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Google \u0432 \u0447\u0430\u0442\u0431\u043e\u0442\u0435 Gemini.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/izuchenie-nachinki-sandbox-okruzheniya-ispolzuemogo-v-google-gemini-dlya-zapuska-python-koda","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-04-02T01:05:17+00:00","article:modified_time":"2025-04-02T01:05:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"123056","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 11:40:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 11:40:21","updated":"2026-01-23 11:40:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/123056","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=123056"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/123056\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/123057"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=123056"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=123056"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=123056"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}