HN user

moderation

285 karma

[ my public key: https://keybase.io/moderation; my proof: https://keybase.io/moderation/sigs/CbMlJ8UxP3MeUYaGGJ5Dr0FuT0ZdG5RQvpNVBMEFbW0 ]

Verifying my Blockstack ID is secured with the address 1EUQr3vsH6os5SFeS9CTqnq462j9H1akkK https://explorer.blockstack.org/address/1EUQr3vsH6os5SFeS9CTqnq462j9H1akkK

Posts0
Comments113
View on HN
No posts found.

This is Claude Code specific but there are similar capabilities for Codex.

"These OS-level restrictions ensure that all child processes spawned by Claude Code’s commands inherit the same security boundaries." [0]

There is a rich deny and allow system for file access that can be used in conjunction with the sandbox [1]

0. https://code.claude.com/docs/en/sandboxing#os-level-enforcem...

1. https://code.claude.com/docs/en/settings#excluding-sensitive...

There is a lot of chatter on Twitter and here about sandboxes for AI, however there appears to be a lack of awareness of the native built in sandboxing capabilities of Claude Code, Codex and Gemini CLI. Claude Code, Codex and Gemini CLI all use seatbelt on MacOS. Claude Code uses bubblewrap on Linux. Codex uses seccomp + landlock on Linux. Codex has experimental native sandboxing on Windows with AppContainer.

The CEO of Sourcegraph Quinn was pretty negative on coding agents and agentic development only about 10 months ago [0]. He had 'agentic stuff' in the Deader category (Used rarely, Reviewing it aint worth it). In fairness, he did say it was the future but 'is not there yet'. Since then, Sourcregraph's code assistant plugin Cody has been deprecated an they are all in on agents and agentic with Amp.

0.https://youtu.be/Up6WVA07QdE?si=xU_iu2rQAWoHXPpO&t=898

"This ensures that neither proxy can see both the client IP address and the destination. CONNECT & CONNECT-UDP support chaining of proxies."

Google are a major contributor to Envoy Proxy and Envoy is used in their stack [0]. CONNECT-UDP support was recently added to Envoy [1, 2, 3]

0. https://twitter.com/gcpweekly/status/1708883000061055151

1. https://github.com/envoyproxy/envoy/pull/27714

2. https://github.com/envoyproxy/envoy/pull/29557

3. https://github.com/envoyproxy/envoy/pull/29651