4 ms·
The real sandbox is not caring if your computer gets bricked.
by xyzzy123 4mo ago
The real sandbox is not caring if your computer gets bricked.
- _345 4mo agoway worse things can happen than your machine being bricked, if a malicious actor can weaponize an agent to do their bidding
- dumbdumb125 4mo agothe solution to both of these is the same thing. vps with accounts for all the services specific to the agent (github and whatever else)
- bornfreddy 4mo agoThat's actually a great idea! Easier to setup and use than VM (hello ssh), safer than docker, and still pretty cheap. Thank you for the idea!
- rfw300 4mo ago> if a malicious actor can weaponize an agent to do their bidding In my experience, human employees are much more vulnerable to this particular weakness than frontier agents (i.e. phishing attacks).
- _345 4mo agoI'm not letting Jenna from HR log into my personal machine with access to all of my lifelong data though. I do let my claude bypass permissions though
- AdamN 4mo agoThe machine is no big deal - it's the authn/authz that matters. What can the agents do with the credentials available to them?
- petesergeant 4mo agoLess if you use something like https://agentblocks.ai https://agentblocks.ai so they don’t actually get the creds