{"id":123056,"date":"2025-04-02T03:05:15","date_gmt":"2025-04-02T01:05:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/izuchenie-nachinki-sandbox-okruzheniya-ispolzuemogo-v-google-gemini-dlya-zapuska-python-koda"},"modified":"2025-04-02T03:05:15","modified_gmt":"2025-04-02T01:05:17","slug":"izuchenie-nachinki-sandbox-okruzheniya-ispolzuemogo-v-google-gemini-dlya-zapuska-python-koda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/izuchenie-nachinki-sandbox-okruzheniya-ispolzuemogo-v-google-gemini-dlya-zapuska-python-koda","title":{"rendered":"Esplorando l'architettura dell'ambiente sandbox utilizzato in Google Gemini per eseguire codice Python","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Sono stati pubblicati i risultati di uno studio sulla sicurezza dell'ambiente isolato per l'esecuzione di codice Python, utilizzato da Google nel chatbot Gemini. Il chatbot Gemini offre strumenti per generare codice in base alla descrizione del compito e per il linguaggio Python consente di eseguire immediatamente il codice creato, per liberare il sviluppatore da passaggi superflui durante il controllo. Il codice viene eseguito in un ambiente isolato, separato dal mondo esterno e consente solo l'esecuzione dell'interprete Python. Per determinare il contenuto dell'ambiente sandbox, i ricercatori sono riusciti a eseguire codice che utilizza le funzionalit\u00e0 della libreria Python os per esaminare il contenuto di tutte le directory e costruire una mappa del file system. <\/p>\n

Particolare interesse ha suscitato il file eseguibile \/usr\/bin\/entry\/entry_point, che occupava 579 MB. Per estrarre questo file, i ricercatori hanno creato uno script che ha progressivamente stampato a video il contenuto in formato Base64. Dalla loro parte, hanno automatizzato l'unione dei frammenti di dati utilizzando lo strumento Caido e hanno ottenuto una copia del file sul loro sistema. <\/p>\n

Per analizzare il file eseguibile ottenuto \u00e8 stata utilizzata l'utilit\u00e0 binwalk, progettata per estrarre file incorporati nei firmware. Tra i dati estratti \u00e8 emerso un catalogo google3, nel quale, stando ai nomi dei file, si trovava codice Python con vari componenti per garantire il funzionamento del servizio, come ad esempio RPC per l'interazione del modello AI Gemini con i servizi esterni di Google, come YouTube, Google Flights e Google Maps.

\"Esplorando<\/center>
\"Esplorando<\/center> <\/p>\n

L'esame del contenuto dei file ha rivelato che non si tratta di codice riservato e che \u00e8 stato approvato per l'accesso pubblico dal servizio di sicurezza di Google. Tuttavia, un'analisi pi\u00f9 approfondita del dump ha rivelato la presenza di file proto (Protocol Buffer) con specifiche per le strutture di dati interne, che consentono di comprendere le complessit\u00e0 dello scambio di dati tra i vari servizi di Google. L'utilit\u00e0 dei file proto identificati \u00e8 dubbia, poich\u00e9 sette anni fa file simili erano gi\u00e0 stati estratti da altri ricercatori di Google App Engine.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0441\u0442\u0438 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Python-\u043a\u043e\u0434\u0430, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Google \u0432 \u0447\u0430\u0442\u0431\u043e\u0442\u0435 Gemini. \u0427\u0430\u0442\u0431\u043e\u0442 Gemini \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u043a\u043e\u0434\u0430 \u043f\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e \u0437\u0430\u0434\u0430\u0447\u0438 \u0438 \u0434\u043b\u044f \u044f\u0437\u044b\u043a\u0430 Python \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u0440\u0430\u0437\u0443 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u0434, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u043e\u0442 \u043b\u0438\u0448\u043d\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u0440\u0438 \u0435\u0433\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435. \u041a\u043e\u0434 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0432 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u0442\u0440\u0435\u0437\u0430\u043d\u043e \u043e\u0442 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u043c\u0438\u0440\u0430 \u0438 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":123057,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-123056","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Esplorazione della tecnologia dell'ambiente sandbox utilizzato in Google Gemini per l'esecuzione del codice Python | ProHoster","description":"Sono stati pubblicati i risultati di uno studio sulla sicurezza dell'ambiente isolato per l'esecuzione di codice Python, utilizzato da Google nel chatbot Gemini. Il chatbot Gemini offre strumenti per generare codice in base alla descrizione del compito e per il linguaggio Python consente di eseguire immediatamente il codice creato, per liberare gli sviluppatori da azioni superflue durante il suo controllo. Il codice viene eseguito in un ambiente isolato, staccato dal mondo esterno e consente","canonical_url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/izuchenie-nachinki-sandbox-okruzheniya-ispolzuemogo-v-google-gemini-dlya-zapuska-python-koda","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0437\u0443\u0447\u0435\u043d\u0438\u0435 \u043d\u0430\u0447\u0438\u043d\u043a\u0438 sandbox-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0432 Google Gemini \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 Python-\u043a\u043e\u0434\u0430 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0441\u0442\u0438 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Python-\u043a\u043e\u0434\u0430, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Google \u0432 \u0447\u0430\u0442\u0431\u043e\u0442\u0435 Gemini. \u0427\u0430\u0442\u0431\u043e\u0442 Gemini \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u043a\u043e\u0434\u0430 \u043f\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e \u0437\u0430\u0434\u0430\u0447\u0438 \u0438 \u0434\u043b\u044f \u044f\u0437\u044b\u043a\u0430 Python \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u0440\u0430\u0437\u0443 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u0434, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u043e\u0442 \u043b\u0438\u0448\u043d\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u0440\u0438 \u0435\u0433\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435. \u041a\u043e\u0434 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0432 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u0442\u0440\u0435\u0437\u0430\u043d\u043e \u043e\u0442 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u043c\u0438\u0440\u0430 \u0438 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442","og:url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/izuchenie-nachinki-sandbox-okruzheniya-ispolzuemogo-v-google-gemini-dlya-zapuska-python-koda","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-04-02T01:05:17+00:00","article:modified_time":"2025-04-02T01:05:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"123056","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 11:40:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 11:40:21","updated":"2026-01-23 11:40:21"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/123056","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=123056"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/123056\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media\/123057"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=123056"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=123056"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=123056"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}