3 ms·

Is there any chance your talk was recorded?

simonw 1y ago
It wasn't, but the written version of it it is actually better than what I said in the room (since I got to think a little bit harder and add relevant links).
- semi-extrinsic 1y ago
  IIUC your talk "just" suggests using sandbox-exec on Mac, which (as you point out) is sadly labeled as deprecated. Is that really the best solution the world has to offer in 2025? LLMs aside, there is a whole host of supply chain risk issues that would be resolved by deploying convenient and strong sandboxes everywhere.
  - simonw 1y ago
    My preferred solutions right now: 1. A sandbox on someone else's computer. Claude Code for web, Codex Cloud, Gemini Jules, GitHub Codespaces, ChatGPT/Claude Code Interpreter 2. A Docker container. I think these are robust enough to be safe. 3. sandbox-exec related tricks. I haven't poked hard enough at Claude Code's new sandbox-exec sandbox yet - they only released it on Monday. OpenAI Codex CLI was using sandbox-exec too last time I looked but again, I've not reviewed it enough to be comfortable with it. I'm hoping more credible options come along for the sandboxing problems.
    - knowaveragejoe 1y ago
      If I understand correctly, Claude Code will(shortly, if not already) make use of Anthropic's sandbox that wraps Seatbelt on OS X, not sandbox-exec? It's cool that they made this open source. It seems straightforward and useful enough that it could be used on its own for sandboxing purposes. https://docs.claude.com/en/docs/claude-code/sandboxing https://docs.claude.com/en/docs/claude-code/sandboxing https://github.com/anthropic-experimental/sandbox-runtime https://github.com/anthropic-experimental/sandbox-runtime
      - simonw 1y ago
        Yeah they shipped that feature on Monday, you can access it via the /sandbox command. I haven't put it through its paces enough to get a feel for if I trust it yet though.
      - simonw 1y ago
        That library is using sandbox-exec to access Seatbelt: https://github.com/anthropic-experimental/sandbox-runtime/blob/4966973ee9b070336ac777f12e3cabd2ca745fc7/src/sandbox/macos-sandbox-utils.ts#L530 https://github.com/anthropic-experimental/sandbox-runtime/bl...
    - mentalgear 1y ago
      I found Vibekit's (open-source https://docs.vibekit.sh/sdk https://docs.vibekit.sh/sdk) approach of allowing you to chose your own sandboxing solution for any coding cli the most flexible. Also works with openCode and local or cloud sandboxes ! Really quality piece of software that more devs should know about. I'm surprised Simon hasn't tried it yet.

It wasn't, but the written version of it it is actually better than what I said in the room (since I got to think a little bit harder and add relevant links).

semi-extrinsic 1y ago
IIUC your talk "just" suggests using sandbox-exec on Mac, which (as you point out) is sadly labeled as deprecated. Is that really the best solution the world has to offer in 2025? LLMs aside, there is a whole host of supply chain risk issues that would be resolved by deploying convenient and strong sandboxes everywhere.
- simonw 1y ago
  My preferred solutions right now: 1. A sandbox on someone else's computer. Claude Code for web, Codex Cloud, Gemini Jules, GitHub Codespaces, ChatGPT/Claude Code Interpreter 2. A Docker container. I think these are robust enough to be safe. 3. sandbox-exec related tricks. I haven't poked hard enough at Claude Code's new sandbox-exec sandbox yet - they only released it on Monday. OpenAI Codex CLI was using sandbox-exec too last time I looked but again, I've not reviewed it enough to be comfortable with it. I'm hoping more credible options come along for the sandboxing problems.
  - knowaveragejoe 1y ago
    If I understand correctly, Claude Code will(shortly, if not already) make use of Anthropic's sandbox that wraps Seatbelt on OS X, not sandbox-exec? It's cool that they made this open source. It seems straightforward and useful enough that it could be used on its own for sandboxing purposes. https://docs.claude.com/en/docs/claude-code/sandboxing https://docs.claude.com/en/docs/claude-code/sandboxing https://github.com/anthropic-experimental/sandbox-runtime https://github.com/anthropic-experimental/sandbox-runtime
    - simonw 1y ago
      Yeah they shipped that feature on Monday, you can access it via the /sandbox command. I haven't put it through its paces enough to get a feel for if I trust it yet though.
    - simonw 1y ago
      That library is using sandbox-exec to access Seatbelt: https://github.com/anthropic-experimental/sandbox-runtime/blob/4966973ee9b070336ac777f12e3cabd2ca745fc7/src/sandbox/macos-sandbox-utils.ts#L530 https://github.com/anthropic-experimental/sandbox-runtime/bl...
  - mentalgear 1y ago
    I found Vibekit's (open-source https://docs.vibekit.sh/sdk https://docs.vibekit.sh/sdk) approach of allowing you to chose your own sandboxing solution for any coding cli the most flexible. Also works with openCode and local or cloud sandboxes ! Really quality piece of software that more devs should know about. I'm surprised Simon hasn't tried it yet.