5 ms·
Not if one is running it in a non-privileged vm/container with restricted network access. But everything is YOLO these days.
by woodson 5mo ago
Not if one is running it in a non-privileged vm/container with restricted network access. But everything is YOLO these days.
- CoastalCoder 5mo agoForgive the tangent, but I'm just starting to learn about using AI for coding, and getting a safe sandbox is one of my next steps. Any suggestions for a vm/container setup that works on a Linux host, provides the safety net you describe, and is still capable enough to try out all these things that people are talking about?
- SoftTalker 5mo agoEasiest thing is to run your AI under a separate user identity, with its own home directory, and no sudo permission. Then it can't screw up your system or your own files.
- woodson 5mo agoYou can use devcontainers (in VSCode or separate), like this: https://github.com/entn-at/claude-rust-devcontainer/ https://github.com/entn-at/claude-rust-devcontainer/ This will limit the agent in what it can do in the system and what IPs/domains it can reach. This requires a lot of customization to your specific framework/environment. Note that this can reduce the agent’s effectiveness, as it will have to “work around” some of the limitations. This isn’t foolproof either, and the agent could exfiltrate data e.g. via DNS requests.