News for hackers. Stuff that matters.

A comment on Google Antigravity exfiltrates data. Parent comment

Re:Google Antigravity exfiltrates data by keepamovin on Tuesday November 25, 2025 @04:04PM (#46050762)
Why not just do remote model isolation? Like remote browser isolation. Run your local model / agent on a little box that has access to the internet and also has your repository, but doesn't have anything else. Like BrowserBox.

You interact with and drive the agent over a secure channel to your local machine, protected with this extra layer.

Is the source-code the secret you are trying to protect? Okay, no internet for you. Do you keep production secrets in your source-code? Okay, no programming permissions for you. ;)

[ Parent | on HN ]
Re:Google Antigravity exfiltrates data by simonw on Tuesday November 25, 2025 @04:49PM (#46051210)
The easiest way to do that today is to use one of the cloud-based asynchronous coding agent tools - like https://claude.ai/code or https://chatgpt.com/codex or https://jules.google/

They run the agent in a VM somewhere on their own infrastructure. Any leaks are limited to the code and credentials that you deliberately make available to those tools.

[ Parent | on HN ]
Re:Google Antigravity exfiltrates data by keepamovin on Wednesday November 26, 2025 @05:03AM (#46055918)
Yes, this is a good idea. My only beef with that is I would love if their base images would run on macOS runners, and Windows runners, too. Just like GH Actions workflows. Then I wouldn't need to go agentic locally.
[ Parent | on HN ]