Re:Sandboxing
by bearjaws on Wednesday August 05, 2026 @01:29PM
(#49186065)
This really isn't enough IMO.
I recently made a bash script to run in a local directory, boot up a lima VM, setup a tailscale network (I like to access from phone + laptop), and completely segment off everything.
Honestly even with this new setup, I am still paranoid, but its a lot better than what I did before (claude code running on my Mac)
Re:Sandboxing
by kiran-ravi on Wednesday August 05, 2026 @01:47PM
(#49186319)
There are different levels of sandboxing including kernel level for highest protection. definitely depends on the usecases. industry is moving towards on-demand cloud sandboxes.
Re:Sandboxing
by brof on Friday August 07, 2026 @12:34PM
(#49212963)
> On macOS, Zed uses Apple's Seatbelt sandbox through sandbox-exec.
From `man sandbox-exec`, "The sandbox-exec command is DEPRECATED." However, a lot of AI harnesses seem to use it anyway - I wonder what this says about long-term Apple support.
I recently made a bash script to run in a local directory, boot up a lima VM, setup a tailscale network (I like to access from phone + laptop), and completely segment off everything.
Honestly even with this new setup, I am still paranoid, but its a lot better than what I did before (claude code running on my Mac)
It sounds interesting - is the code available somewhere?
From `man sandbox-exec`, "The sandbox-exec command is DEPRECATED." However, a lot of AI harnesses seem to use it anyway - I wonder what this says about long-term Apple support.