logoalt Hacker News

ogriseltoday at 8:05 AM2 repliesview on HN

I think there is far less than 1% chance for this to happen, but there are probably millions of antigravity users at this point, 1 millionths chance of this to happen is already a problem.

We need local sandboxing for FS and network access (e.g. via `cgroups` or similar for non-linux OSes) to run these kinds of tools more safely.


Replies

cube2222today at 8:32 AM

Codex does such sandboxing, fwiw. In practice it gets pretty annoying when e.g. it wants to use the Go cli which uses a global module cache. Claude Code recently got something similar[0] but I haven’t tried it yet.

In practice I just use a docker container when I want to run Claude with —-dangerously-skip-permissions.

[0]: https://code.claude.com/docs/en/sandboxing

BrenBarntoday at 9:00 AM

We also need laws. Releasing an AI product that can (and does) do this should be like selling a car that blows your finger off when you start it up.

show 5 replies