JFrog Artifactory

“The fact that they're using Artifactory in the first place is already a failure.”

“I don't think anyone is claiming that using Artifactory to isolate these agents”

“it is widely used and usually considered a safe choice”

“a middle ground is using Artifactory or whatever as a proxy”

“a part of the system that doesn't provide any isolation guarantees was bridged to the internet”

“Artifactory was not fit for the job, and sandboxing failed.”

“Artifactory is not a hardened piece of software meant for adversarial workloads”

“Any closed source program is insane liability. Trusting in competence of one company is the easiest way to get burnt.”

“artifactory is proprietary software that used to be open source, so nobody is looking at the code anymore”

“It is not intended as a robust and secure packet manager for sandboxes.”

“It's a bug in closed software that has like 40 CVEs this year alone.”

“the models identified and exploited a previously unknown zero-day vulnerability in Artifactory, a package registry cache proxy”

“exposing an attack surface as porous as artifactory (the same instance of artifactory) to thousands of agents”

“its incomplete, full of badly defined objects, and ends up being utterly useless”

“predominantly being more reliable and faster than public repositories”

“ensuring that versioned libraries can never be overwritten in place with a different version”

“makes a good message board for your slightly-more-rambunctious-than-intended AI agents to collaborate and commiserate”

“using Git for text and Artifactory for artifact binaries has worked pretty well for me”

“Stuff like this feels inexcusable for a company with effectively unlimited tokens.”

“The only thing between the model and the internet was Artifactory.”

“The way they had Artifactory configured was poor, and they were too reliant on it working perfectly”

“it doesn't especially have the ability to write files and act as a message board as Artifactory did”

“What isn't being discussed is what an indictment this is of Artifactory.”

“the vulnerabilities themselves (mostly in apps developed on the jvm, e.g. artifactory)”

“Given the feature explosion and chaos in the Artifactory cache, it is likely vibe coded and hence full of primitive security vulnerabilities.”

“Caching proxies are a decent middle ground like Artifactory”

“If you work in a large company, you already likely have cooldowns via Artifactory / Nexus”

“Security minded organisations don't allow cowboy installs into projects, the systems are configured to use internal repos”

“enterprise solved this problem long ago”

“This is why Artifactory and similar exist and they do this better.”

“Artifactory is a drop-in replacement for every kind of repository they'll need to work with, and it has a nice UI.”

“the end effect was production never pulled from the internet”

“We use artifactory and it also works great”

“We've experienced pain in the management of the solution”

“Artifactory OSS is a joke, and no other product is out there.”

“JFrog supports granular proxy specification by repo.”

“One neat feature of artifactory edge is that the asset download can skip hitting the edge peer and go straight to s3.”

“Artifactory didn’t compress its REST responses, and when you have a CI/CD pipeline that’s been running for six years”

“Artifactory/Nix are heavy (they require rebuilding your workflow or hosting servers).”

“Given that Jfrog bills on egress for these container images I'm sure you guys saw an eye watering bill for the privilege of distributing your bloated container”