Remix clone Hacker News

new | show | ask | jobs Github

▲

zingar 4 hours ago

What are the sandboxing / isolation options that would protect against attacks like this?

▲

juliie 3 hours ago | parent | next [-]

Running Claude code in an isolated, temporary VM, with no access to memory is a good start. You give it your repo, prompt and you get back PRs. Claude code on web is a convenient way to do that.

▲

pianopatrick an hour ago | parent [-]

given that claude has found vm escapes, you might consider going one step further and just getting a claude only laptop

	▲	pitched 4 minutes ago \| parent [-]
		You need a laptop that has no camera, mic, keyboard, or any type of input. No display, speakers, or any type of output. No Bluetooth, wifi, or any way to join a different network.

▲

hoppp 3 hours ago | parent | prev | next [-]

I configured remote VPS and cloudflare sandboxes to run my agents.

▲

Uehreka 3 hours ago | parent | prev [-]

Who says that such options necessarily need to exist?

	▲	malfist 3 hours ago \| parent [-]
		Your employer worried about exfiltration