Re:Updates to Full Disk Access in macOS
by kccqzy on Friday October 02, 2026 @05:01PM
(#49938569)
Whenever I ask Claude to vibecode macOS native apps for me, I always request the apps to be sandboxed. Agents know how to sandbox the apps; just ask. And you can verify it without reading any code.
[ Parent
| on HN ]
Re:Updates to Full Disk Access in macOS
by etatester on Saturday October 03, 2026 @03:47AM
(#49942207)
Call me a paranoid but I'm afraid of the harness itself, not the apps it generates. You can see lots of people being concerned with Deepseek Harness being Chinese, but I share the same sentiment towards all AI-based software that can run unsandboxed on my computer.
Re:Updates to Full Disk Access in macOS
by chrisjj on Saturday October 03, 2026 @12:16PM
(#49945526)
[delayed]
Re:Updates to Full Disk Access in macOS
by chrisjj on Saturday October 03, 2026 @12:15PM
(#49945514)
[delayed]
There are several ways using only the GUI to tell whether an app is sandboxed.
This is a fluff piece that has zero technical details. But I find your logic very interesting: if the presence of one CVE in sandboxing makes sandboxing untrustworthy, should we not have long ago discounted the entire security of Linux due to many CVEs for privilege escalation? Or the security of any and all browsers?