Hacker News

points by thisisauserid 1 day ago | 0 comments

Firecracker VMs run on AWS. Odd that the article doesn't mention that.

[–] whizzter 1 day ago

Firecracker is open source and possibly others use it, AWS sells services with it though.

[–] tptacek 1 day ago

(A more complete way to say this is that Firecracker is the engine built to run AWS Lambda and AWS Fargate).

[–] tcdent 1 day ago

It has notable adoption in the agent sandbox space where this type of vulnerability is especially volatile.

[–] thisisauserid 1 day ago

> The target was Firecracker v1.16.1 on x86-64, with host kernel 7.0.0-1011-aws.

[–] sscaryterry 1 day ago

Firecracker v1.17.0 was released 10 September, so the version is ancient.

[–] iberator 1 day ago

Do you even know what ancient means? 2 months is ancient for you? Are you like 6?

[–] sscaryterry 1 day ago

Yes, 2 months is ancient if 0 days is the game.

[–] pier25 1 day ago

Fly uses it too afaik

[–] tptacek 1 day ago

Basically everyone in cloud-land uses it at this point.

[–] hirako2000 1 day ago

And should jail/SE.

[–] tptacek 12 hours ago

The standard Firecracker setup uses a jailer that the Firecracker project provides. This generally isn't something you need to go out of your way to do.

[–] pjmlp 10 hours ago

Microsoft certainly doesn't, and I am sure IBM, Salesforce, SAP and Oracle most likely also don't.

[–] tptacek 8 hours ago

Sorry, I'm neo-Cloud brained. You're right; AWS is the only hyperscaler I know of that uses Firecracker.

[–] Betelbuddy 1 day ago

Not affected https://aws.amazon.com/security/security-bulletins/2026-137-...

[–] sscaryterry 1 day ago

The article is light on details, it is LLM slop.