gpu-sentinel: reproducing a GPU-cloud container escape with no GPU

The other day a question stuck in my head: what does security actually look like in the context of GPUs? My workflow for questions like this has changed. A few years ago I'd have spent an evening watching a YouTube video and reading blog posts; today I can ask a language model and get a genuinely good answer back. So I asked. And the answer really struck, in one sentence: the overwhelming majority…