4 ms·

People seem to come up with all manner of complicated setups with virtual machines or docker or whatever. All you need is a separate limited user account on yo

by petcat 7mo ago

People seem to come up with all manner of complicated setups with virtual machines or docker or whatever. All you need is a separate limited user account on your computer. Multi-user Unix-y systems were designed for this kind of thing for decades. My entire development environment is literally just "sudo".

DaedalusII 7mo ago
your kernel is not isolate and if you accidentally run the wrong command in sudo you will nuke your computer lol or just have a linux vps and ssh in for $5 a month
- deleted 7mo ago
  [deleted]
- petcat 7mo ago
  > if you accidentally run the wrong command in sudo I'm not seeing your point. Are you saying that I shouldn't use sudo because I might accidentally "run the wrong command"? I know all the commands that I run and what they do. > your kernel is not isolate Am I more afraid of an npm package exploiting a zero day kernel vulnerability on my mac? Or just stealing my AWS keys and installing a crypto miner? Sudo suits my threat model just fine. My m3 MacBook pro is a million times more powerful dev machine than a cheap $5 vps. Why would I waste my time with that.
  - DaedalusII 7mo ago
    yes you right, i assume you using claude code which can in fact accidentally run the wrong command https://www.reddit.com/r/ClaudeAI/comments/1n1moqy/how_did_claude_code_do_an_rm_rf_without_relevant/ https://www.reddit.com/r/ClaudeAI/comments/1n1moqy/how_did_c... https://www.reddit.com/r/ClaudeCode/comments/1sa3fx8/claude_out_of_nowhere_tried_to_run_rm_rf/ https://www.reddit.com/r/ClaudeCode/comments/1sa3fx8/claude_... https://old.reddit.com/r/ClaudeAI/comments/1jfidvb/claude_tried_to_nuke_my_home/ https://old.reddit.com/r/ClaudeAI/comments/1jfidvb/claude_tr...
    - petcat 7mo ago
      My Claude runs as a limited user account, which I invoke using sudo. Claude can run whatever commands it wants and the only harm it can do is nuke its own home directory. That's the whole point.
      - indigodaddy 7mo ago
        They weren't getting that sudo was just your mechanism for changing user.
secondcoming 7mo ago
The advantage of VMs is that you can nuke them and be done with it if you need to. I use my personal laptop for $WORK and everything work related is done via the VM.
- petcat 7mo ago
  I can do that too by just rm-rf the agents home directory

by petcat 7mo ago

DaedalusII 7mo ago

your kernel is not isolate and if you accidentally run the wrong command in sudo you will nuke your computer lol or just have a linux vps and ssh in for $5 a month

deleted 7mo ago
[deleted]
petcat 7mo ago
> if you accidentally run the wrong command in sudo I'm not seeing your point. Are you saying that I shouldn't use sudo because I might accidentally "run the wrong command"? I know all the commands that I run and what they do. > your kernel is not isolate Am I more afraid of an npm package exploiting a zero day kernel vulnerability on my mac? Or just stealing my AWS keys and installing a crypto miner? Sudo suits my threat model just fine. My m3 MacBook pro is a million times more powerful dev machine than a cheap $5 vps. Why would I waste my time with that.
- DaedalusII 7mo ago
  yes you right, i assume you using claude code which can in fact accidentally run the wrong command https://www.reddit.com/r/ClaudeAI/comments/1n1moqy/how_did_claude_code_do_an_rm_rf_without_relevant/ https://www.reddit.com/r/ClaudeAI/comments/1n1moqy/how_did_c... https://www.reddit.com/r/ClaudeCode/comments/1sa3fx8/claude_out_of_nowhere_tried_to_run_rm_rf/ https://www.reddit.com/r/ClaudeCode/comments/1sa3fx8/claude_... https://old.reddit.com/r/ClaudeAI/comments/1jfidvb/claude_tried_to_nuke_my_home/ https://old.reddit.com/r/ClaudeAI/comments/1jfidvb/claude_tr...
  - petcat 7mo ago
    My Claude runs as a limited user account, which I invoke using sudo. Claude can run whatever commands it wants and the only harm it can do is nuke its own home directory. That's the whole point.
    - indigodaddy 7mo ago
      They weren't getting that sudo was just your mechanism for changing user.

secondcoming 7mo ago

The advantage of VMs is that you can nuke them and be done with it if you need to. I use my personal laptop for $WORK and everything work related is done via the VM.

petcat 7mo ago
I can do that too by just rm-rf the agents home directory