{"id":123056,"date":"2025-04-02T03:05:15","date_gmt":"2025-04-02T01:05:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/izuchenie-nachinki-sandbox-okruzheniya-ispolzuemogo-v-google-gemini-dlya-zapuska-python-koda"},"modified":"2025-04-02T03:05:15","modified_gmt":"2025-04-02T01:05:17","slug":"izuchenie-nachinki-sandbox-okruzheniya-ispolzuemogo-v-google-gemini-dlya-zapuska-python-koda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/izuchenie-nachinki-sandbox-okruzheniya-ispolzuemogo-v-google-gemini-dlya-zapuska-python-koda","title":{"rendered":"STudiul con\u021binutului mediului sandbox utilizat \u00een Google Gemini pentru executarea codului Python","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

S-au publicat rezultatele unei cercet\u0103ri privind securitatea mediului izolat pentru executarea codului Python, utilizat de Google \u00een chatbotul Gemini. Chatbotul Gemini ofer\u0103 instrumente pentru generarea de cod pe baza descrierii sarcinii \u0219i, pentru limbajul Python, permite rularea imediat\u0103 a codului generat, evit\u00e2nd astfel pa\u0219ii suplimentari pentru verificarea acestuia de c\u0103tre dezvoltator. Codul este rulat \u00eentr-un mediu izolat, complet separat de lumea exterioar\u0103, care permite doar executarea interpretatorului Python. Pentru a determina con\u021binutul mediului sandbox, cercet\u0103torii au reu\u0219it s\u0103 ruleze un cod care folose\u0219te func\u021bionalit\u0103\u021bile bibliotecii Python os pentru a parcurge con\u021binutul tuturor directorilor \u0219i a construi o hart\u0103 a sistemului de fi\u0219iere. <\/p>\n

Un interes special a fost st\u00e2rnit de fi\u0219ierul executabil \/usr\/bin\/entry\/entry_point, care avea 579 MB. Pentru a extrage acest fi\u0219ier, cercet\u0103torii au creat un script care, treptat, afi\u0219a pe ecran con\u021binutul \u00een format Base64. Au automatizat lipirea fragmentelor de date de partea lor cu ajutorul instrumentelor Caido \u0219i au ob\u021binut o copie a fi\u0219ierului pe sistemul lor. <\/p>\n

Pentru analiza fi\u0219ierului executabil ob\u021binut a fost utilizat\u0103 utilitarul binwalk, proiectat pentru extragerea fi\u0219ierelor \u00eencorporate \u00een firmware. Printre datele extrase s-a aflat un director google3, \u00een care, judec\u00e2nd dup\u0103 denumirile fi\u0219ierelor, se afla cod Python cu diverse componente necesare func\u021bion\u0103rii serviciului, de exemplu, RPC pentru interac\u021biunea modelului AI Gemini cu serviciile externe Google, precum YouTube, Google Flights \u0219i Google Maps.

\"STudiul<\/center>
\"STudiul<\/center> <\/p>\n

Studiul con\u021binutului fi\u0219ierelor a ar\u0103tat c\u0103 acesta nu este cod confiden\u021bial \u0219i a fost aprobat pentru acces public de serviciul de securitate Google. \u00cen plus, analiza ulterioar\u0103 a dump-ului a relevat prezen\u021ba unor fi\u0219iere proto (Protocol Buffer) cu specifica\u021bii ale structurilor interne de date, permi\u021b\u00e2nd \u00een\u021belegerea nuan\u021belor schimbului de date \u00eentre diferitele servicii Google. Utilitatea extragerii fi\u0219ierelor proto identificate este discutabil\u0103, deoarece acum \u0219apte ani, astfel de fi\u0219iere proto au fost deja extrase de al\u021bi cercet\u0103tori din Google App Engine.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0441\u0442\u0438 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Python-\u043a\u043e\u0434\u0430, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Google \u0432 \u0447\u0430\u0442\u0431\u043e\u0442\u0435 Gemini. \u0427\u0430\u0442\u0431\u043e\u0442 Gemini \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u043a\u043e\u0434\u0430 \u043f\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e \u0437\u0430\u0434\u0430\u0447\u0438 \u0438 \u0434\u043b\u044f \u044f\u0437\u044b\u043a\u0430 Python \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u0440\u0430\u0437\u0443 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u0434, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u043e\u0442 \u043b\u0438\u0448\u043d\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u0440\u0438 \u0435\u0433\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435. \u041a\u043e\u0434 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0432 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u0442\u0440\u0435\u0437\u0430\u043d\u043e \u043e\u0442 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u043c\u0438\u0440\u0430 \u0438 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":123057,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-123056","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Studii asupra componentelor mediului sandbox utilizat \u00een Google Gemini pentru a rula cod Python | ProHoster","description":"S-au publicat rezultatele unei cercet\u0103ri privind securitatea mediului izolat pentru executarea codului Python, utilizat de Google \u00een chatbotul Gemini.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/izuchenie-nachinki-sandbox-okruzheniya-ispolzuemogo-v-google-gemini-dlya-zapuska-python-koda","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0437\u0443\u0447\u0435\u043d\u0438\u0435 \u043d\u0430\u0447\u0438\u043d\u043a\u0438 sandbox-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0432 Google Gemini \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 Python-\u043a\u043e\u0434\u0430 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0441\u0442\u0438 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Python-\u043a\u043e\u0434\u0430, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Google \u0432 \u0447\u0430\u0442\u0431\u043e\u0442\u0435 Gemini.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/izuchenie-nachinki-sandbox-okruzheniya-ispolzuemogo-v-google-gemini-dlya-zapuska-python-koda","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-04-02T01:05:17+00:00","article:modified_time":"2025-04-02T01:05:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"123056","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 11:40:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 11:40:21","updated":"2026-01-23 11:40:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/123056","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=123056"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/123056\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/123057"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=123056"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=123056"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=123056"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}