Like many people, I suspect, I used Claude to write my own agent sandbox that suits my needs very well. Investing my time in a propietary product has become a hard sell.
I did the same thing. It was my first "vibecoded" project. I've been using it every day and it's great. I'm writing a custom Rust network stack for it right now. Gonna replace the current nftables firewall with it.
As for Docker Sandboxes, I'll just ask Sol literally right now to see what it does better than my virtdev, and then I'll improve virtdev instead of using Docker.
> Were you following any patterns/standards/advice on what you needed to protect against?
Just the general knowledge that sharing a kernel with untrusted software is too dangerous, that hardware virtualization is an infinitely smaller attack surface and that the entire industry will be in deep shit if people or AI breaks hypervisors.
Initial threat model was supply chain attacks but eventually grew to include AI harnesses as well. Not very worried about them hacking me, more about accident prevention.
So that means each VM must be running a completely independent kernel that's fully isolated from the host's file system. They must also have fail closed network filtering built in.
In summary, it's a QEMU VM orchestrator with a base OS image and project specific delta images. VM lifecycle is managed by systemd. System level isolation is already pretty good and it already solves the "AI wiped out my $HOME" problem. I'm currently working on a custom network stack to replace the nftables based firewall.
You want to prevent the agent/others from reaching your home directory and other things. As long as you don't mount/sync directories/files from/to the container, so no mounting like "-v $(pwd):/app", but instead copy in, then when done, copy out.
And of course, instead of doing the "copy in > copy out" process manually, get your local agent to write a bash script that does that for you, given what directory you're in, and you're basically G2G.
Sure, but all projects are version controlled? You only mount the project dir so you can only loose your current changes - which is the same if you copy...
Travis Brown worked for Twitter and almost certainly had access to personally-identifying information on @libsoftiktok that he used to dox her.
You might think he's a hero, but I'm not sure you'd like it if the situation were reversed, and rightwing tech workers abused their position to expose your online identities because they disagreed with your political opinions.
it was way after he left and he showed how it was done. i dont remember the details but there was a clear public trail of breadcrumbs. zero inside knowledge needed.
you should do your research before making such wild claims.
i would never post inflammatory hate speech anonymously so the reversal isn't possible.
Yes, you’re right. At that point the videos were simply reposted without comment (which achieved her political aims all the more powerfully). She does provide commentary now her account has been restored to Twitter but I wouldn’t describe the commentary as hateful or inciteful.
I think the people she shines a light on are the ones we need to worry about as a society.
