3 ms·
I'm mainly addressing sandboxing by running stuff in Claude Code for web, at which point it's Anthropic's problem if they have a sandbox leak, not mine. It hel
by simonw 8mo ago
I'm mainly addressing sandboxing by running stuff in Claude Code for web, at which point it's Anthropic's problem if they have a sandbox leak, not mine.
It helps that most of my projects are open source so I don't need to worry about prompt injection code stealing vulnerabilities. That way the worst that can happen would be an attack adding a vulnerability to my code that I don't spot when I review the PR.
And turning off outbound networking should protect against code stealing too... but I allow access to everything because I don't need to worry about code stealing and that way Claude can install things and run benchmarks and generally do all sorts of other useful bits and pieces.
- binsquare 8mo agohey fren, try this: https://github.com/smol-machines/smolvm https://github.com/smol-machines/smolvm I already have a couple folks using it for claude: https://github.com/smol-machines/smolvm/discussions/3 https://github.com/smol-machines/smolvm/discussions/3
- indigodaddy 8mo agoIf you could make your tool work with PVM that would be amazing
- binsquare 8mo agoTool is already configured with paravirtualization on the linux path Unfortunately, the ecosystem and tooling is not there for macOS full paravirtualization yet
- indigodaddy 8mo agoOh neat yeah I only care about Linux pvm. Assuming we still have to have already installed the PVM kernel and other pvm-related prereqs or?