{"id":123056,"date":"2025-04-02T03:05:15","date_gmt":"2025-04-02T01:05:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/izuchenie-nachinki-sandbox-okruzheniya-ispolzuemogo-v-google-gemini-dlya-zapuska-python-koda"},"modified":"2025-04-02T03:05:15","modified_gmt":"2025-04-02T01:05:17","slug":"izuchenie-nachinki-sandbox-okruzheniya-ispolzuemogo-v-google-gemini-dlya-zapuska-python-koda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/izuchenie-nachinki-sandbox-okruzheniya-ispolzuemogo-v-google-gemini-dlya-zapuska-python-koda","title":{"rendered":"Analisi della struttura dell'ambiente sandbox utilizzato in Google Gemini per l'esecuzione di codice Python","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Pubblicati i risultati di uno studio sulla sicurezza di un ambiente isolato per l'esecuzione di codice Python utilizzato da Google nel chatbot Gemini. Il chatbot Gemini fornisce strumenti per la generazione di codice in base alla descrizione del compito e, per il linguaggio Python, consente di eseguire immediatamente il codice creato, liberando lo sviluppatore da azioni superflue durante il controllo. Il codice viene eseguito in un ambiente isolato, che \u00e8 staccato dal mondo esterno e consente solo l'esecuzione dell'interprete Python. Per determinare il contenuto dell'ambiente sandbox, i ricercatori hanno ottenuto l'esecuzione di codice che utilizza le funzionalit\u00e0 della libreria Python os per esaminare il contenuto di tutte le directory e costruire una mappa del file system. <\/p>\n

Particolare interesse ha suscitato il file eseguibile \/usr\/bin\/entry\/entry_point, che occupava 579 MB. Per estrarre questo file, i ricercatori hanno creato uno script che mostrava progressivamente e a piccole porzioni il contenuto in formato Base64. Da parte loro, hanno automatizzato la fusione dei dati utilizzando lo strumento Caido, ottenendo cos\u00ec una copia del file sul loro sistema. <\/p>\n

Per analizzare il file eseguibile ottenuto, \u00e8 stato utilizzato il programma binwalk, progettato per estrarre file incorporati nei firmware. Tra i dati estratti era presente la directory google3, che conteneva, secondo i nomi dei file, codice Python con vari componenti per garantire il funzionamento del servizio, ad esempio, RPC per interagire con i servizi esterni di Google, come YouTube, Google Flights e Google Maps.

\"Analisi<\/center>
\"Analisi<\/center> <\/p>\n

L'analisi del contenuto dei file ha rivelato che questo non era codice riservato ed era stato approvato per l'accesso pubblico dai servizi di sicurezza di Google. Tuttavia, un'ulteriore analisi del dump ha rivelato la presenza di file proto (Protocol Buffer) con specifiche per le strutture di dati interne, che permettono di comprendere le complessit\u00e0 dello scambio di dati tra i vari servizi di Google. L'utilit\u00e0 dei file proto trovati \u00e8 dubbia, poich\u00e9 sette anni fa file simili erano gi\u00e0 stati estratti da altri ricercatori di Google App Engine.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0441\u0442\u0438 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Python-\u043a\u043e\u0434\u0430, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Google \u0432 \u0447\u0430\u0442\u0431\u043e\u0442\u0435 Gemini. \u0427\u0430\u0442\u0431\u043e\u0442 Gemini \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u043a\u043e\u0434\u0430 \u043f\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e \u0437\u0430\u0434\u0430\u0447\u0438 \u0438 \u0434\u043b\u044f \u044f\u0437\u044b\u043a\u0430 Python \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u0440\u0430\u0437\u0443 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u0434, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u043e\u0442 \u043b\u0438\u0448\u043d\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u0440\u0438 \u0435\u0433\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435. \u041a\u043e\u0434 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0432 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u0442\u0440\u0435\u0437\u0430\u043d\u043e \u043e\u0442 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u043c\u0438\u0440\u0430 \u0438 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":123057,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-123056","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Esplorazione del contenuto dell'ambiente sandbox utilizzato in Google Gemini per l'esecuzione di codice Python | ProHoster","description":"Pubblicati i risultati di uno studio sulla sicurezza di un ambiente isolato per l'esecuzione di codice Python utilizzato da Google nel chatbot Gemini.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/izuchenie-nachinki-sandbox-okruzheniya-ispolzuemogo-v-google-gemini-dlya-zapuska-python-koda","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0437\u0443\u0447\u0435\u043d\u0438\u0435 \u043d\u0430\u0447\u0438\u043d\u043a\u0438 sandbox-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0432 Google Gemini \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 Python-\u043a\u043e\u0434\u0430 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0441\u0442\u0438 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Python-\u043a\u043e\u0434\u0430, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Google \u0432 \u0447\u0430\u0442\u0431\u043e\u0442\u0435 Gemini.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/izuchenie-nachinki-sandbox-okruzheniya-ispolzuemogo-v-google-gemini-dlya-zapuska-python-koda","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-04-02T01:05:17+00:00","article:modified_time":"2025-04-02T01:05:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"123056","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 11:40:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 11:40:21","updated":"2026-01-23 11:40:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/123056","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=123056"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/123056\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media\/123057"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=123056"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=123056"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=123056"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}