26Design a sandbox for a document parser that processes untrusted uploads, such as PDFs and Office files feeding a RAG index.▼hardNewGoogleMicrosoftAmazon◆ premiumAssume the parser will be exploited, then decide what the exploit gets. The scored design has a disposable worker with nothing worth stealing, no way out, and a narrow, validated return path.Open full answer →
14Explain XXE and server-side template injection, and how you fix each.▼mediumNewGoogleMicrosoftAmazon◆ premiumTwo injection classes where a parser or template engine does far more than the developer intended. The scored answer explains the dangerous feature in each and turns it off.Open full answer →
25Buffer overflows, ASLR and DEP: why do memory safety issues still matter in ML tooling?▼mediumNewGoogleMicrosoftNVIDIA◆ premiumPython sits on top of a lot of C and C++. The scored answer explains the bug class, what the mitigations do and do not stop, and where ML stacks are exposed.Open full answer →