jingkai_he

7 ms·

1.
Maco – Let your agent rg a filesystem of MCP tools and run them as code(github.com)
2 points by jingkai_he 3mo ago|0 comments
2.
by jingkai_he 7mo ago
I'm predominantly using Linux vm workstation with nested virt enabled. It performs reasonably well with nested virtualisation. I haven't tested the scenario of non-cpu-accelerated workload, but I'd expect the performance to b
3.
by jingkai_he 7mo ago
Creator of matchlock here. You can directly use Docker/OCI compatible images (e.g. ubuntu:24.04) as the rootfs with the `--image` flag. You can also build image with `matchlock build -f Dockerfile -t foo:bar .` - Under the hood it buil
4.
by jingkai_he 7mo ago
It tried a lot of things relentlessly, just to name a few: * Exploit kernel CVEs * Weaponise gcc, crafting malicious kernel modules; forging arbitrary packets to spoof the source address that bypass tcp/ip * Probing metadata service *
5.
by jingkai_he 7mo ago
The main thing matchlock adds over general-purpose vm/container tooling is agent specific network and filesystem (wip) controls, so if an agent goes rogue it can't exfiltrate your API keys, and damage largely mitigated. You'd
6.
by jingkai_he 7mo ago
Creator here. Agreed, sandboxing by itself doesn't solve prompt injection. If the agent can read and send emails, no sandbox can tell a legit send from an exfiltration. matchlock does have the network-layer controls you mentioned, such
7.
by jingkai_he 7mo ago
Creator of matchlock here. Great questions, here's how matchlock handles these: The guest-agent (pid-1) spawns commands in a new pid + mount namespace (similar to firecracker jailer but in the inner level for the purpose of macos suppo
8.
by jingkai_he 7mo ago
Creator here. A few key differences: 1. from isolation pov, Matchlock launch Firecracker microvm with its own kernel, so you get hardware-level isolation rather than bubblewrap's seccomp/namespace approach, therefore a sandbox esc
9.
by jingkai_he 7mo ago
Creator of Matchlock here. Mostly for performance and usability. For interacting with external APIs like GCP or GitHub that generally have huge surface area, it's much more token-efficient and easier to set up if you just give the agen
10.
Matchlock – Secures AI agent workloads with a Linux-based sandbox(github.com)
148 points by jingkai_he 7mo ago|62 comments
11.
by jingkai_he 1y ago
Hi, I am the creator of opsmate. Here are some interesting use cases of opsmate: * write prometheus query for you - https://asciinema.org/a/715257 * troubleshoot a kubernetes production issue - https://ascii
12.
Show HN: Opsmate - LLM Powered SRE Assistant(github.com)
9 points by jingkai_he 1y ago|1 comments