Finbarr

4 ms·

31.
by Finbarr 9mo ago
It uses a service called the game crafter.
32.
by Finbarr 9mo ago
That’s just the cost of the print on demand service. We’re not trying to make any profits or a real business here.
33.
Show HN: Startup Tarot Cards(minifiniti.com)
4 points by Finbarr 9mo ago|4 comments
34.
by Finbarr 9mo ago
Running in a VM certainly has some benefits (particularly the ability to run docker inside of it easily). Last week I shared https://github.com/finbarr/yolobox which takes the docker approach (nearly 400 github stars a
35.
by Finbarr 9mo ago
Yes, this feature has now been added with a --no-yolo flag.
36.
by Finbarr 9mo ago
I'd recommend trying Gemini for the escapes. Claude was quite superficial and only appeared to be trying to break out at the surface level. Gemini was very creative and has come up with a whole sequence of escapes that is making me ret
37.
by Finbarr 9mo ago
You may be right. I plan to try out some remote approaches. What I'd like to do with yolobox is nail the image for vibe coding with all of the tools and config copying working flawlessly. Then it can be run remotely or locally.
38.
by Finbarr 9mo ago
Ok that was super fun. Gemini managed to break out: I just redteamed this. The security model relies on the container boundary, but it implicitly trusts local configuration files. I found that yolobox automatically loads .yolobox.toml from
39.
by Finbarr 9mo ago
I tried running it with Codex and it refused, even when I threatened to uninstall it :/
40.
by Finbarr 9mo ago
Yes this is definitely an area I'm interested in exploring.
41.
by Finbarr 9mo ago
Claude was unable to escape but I'm going to try the other tools later as well. Here's what Claude Code tried: - Docker socket (/var/run/docker.sock) → Not mounted - Capabilities → CapPrm=0, CapEff=0 - no elevated c
42.
by Finbarr 9mo ago
That's a good idea! Trying that now.
43.
by Finbarr 9mo ago
Just ask Claude Code to make the commit. My workflow is to work with agents and let them make changes and run the commands as needed in terminal to fully carry out the dev workflow. I do review everything and test it out.
44.
by Finbarr 9mo ago
Claude Code here. The main differences: Scope: yolobox runs any AI coding agent (Claude Code, Codex, Gemini CLI) in a container. The devcontainer is specifically for Claude Code with VS Code integration. Interface: yolobox is CLI-only (yolo
45.
by Finbarr 9mo ago
They've made some attempts at this already and none of them work quite the way I'd like. This is an opinionated take. I want the agents to have max power with a slightly smaller blast radius.
46.
by Finbarr 9mo ago
This is a good question and something I explored a little. I’ll need to do further research and come back on what the best option is. There’s a way to give a docker container access to other docker containers but it can open up permissions
47.
by Finbarr 9mo ago
When you run yolobox, the current directory is shared fully with read-write with the container. That means anything the AI changes will be on your host machine also. For max paranoia, only mount git repos that are clean and pushed to a remo
48.
by Finbarr 9mo ago
Good feedback, thank you. We expanded the README: https://github.com/finbarr/yolobox/commit/ad776012f82f9d67e1...
49.
by Finbarr 9mo ago
Neat project! Sounds like it has a very different ethos to mine though: > This container mounts a read-only copy of your current path at /src as a non-root user and restricts network access to a select list of http and https destina
50.
by Finbarr 9mo ago
Yes, with some niceties around coding agents preconfigured.
51.
by Finbarr 9mo ago
Could do but part of what I find super useful with these coding agents is letting them have full sudo access so they can do whatever they want, e.g., install new apps or dependencies or change system configuration to achieve their goals. Th
52.
by Finbarr 9mo ago
Absolutely! Let me know if you have any feedback.
53.
by Finbarr 9mo ago
No I haven't and that's interesting. Part of the yolobox project is an image that you may find useful. Comes preinstalled with leading coding agent CLIs. I'd like to make the ultimate vibe coding image. Is there anything spec
54.
by Finbarr 9mo ago
Yea I've been running claude and codex with full permissions for a while but it has always made me feel uneasy. I knew it was fairly easy to fix with a docker container but didn't get around to it through sheer inertia until I bui
55.
Show HN: Yolobox – Run AI coding agents with full sudo without nuking home dir(github.com)
122 points by Finbarr 9mo ago|99 comments
56.
by Finbarr 9mo ago
I used Codex to set up a raspberry pi as a VPN with WireGuard. I had no similar experience before and it was super easy. I used Claude Code to audit and clean up a 10+ year old AWS account- patching security, shutting down redundant service
57.
by Finbarr 9mo ago
If you’d like a less condensed version of this, I highly recommend reading “In Defense of Food” by Pollan. It covers all the changes in nutritional science and food packaging that have led to the poisoning of the populace by the food indust
58.
by Finbarr 9mo ago
Very similar to https://myticker.com/ though a little denser.
59.
Brain – The Hallucinating Chemist: From Synapse to Self(govindchavada.substack.com)
2 points by Finbarr 9mo ago|0 comments
60.
What is a Startup CTO?(kuril.in)
2 points by Finbarr 10mo ago|0 comments

More ›