dimiprasakis
Show HN: SideKernel – a usable MicroVM sandbox for AI coding agents on macOS
https://github.com/minoansecurity/sidekernel
Hey everyone, SideKernel is the result of my capstone project for my MSc at Georgia Tech.There are a lot of sandboxes on the market right now for AI agents, but most of them focus on production deployments, rather than coding agents (e.g. Claude Code).I always felt uncomfortable running Claude Code or other coding agents directly on my machine, and I didn't want to buy a second computer or rent...
But, a compromise still lands on host's kernel, Docker doesn't provide kernel isolation (well it does on a macOS because it runs in Docker machine but thats a side effect).
I wonder if a better solution would be to play with seccomp or Linux capabilities so that Chrome is sandboxed even in Docker. Not sure how this would work tbh.
Answering here to get ideas, I saw your fix on Git and request for feedback (will try to review and give it some thought once I find some time)
In any case, cool stuff :)
So, a number.
The Road to a Social Cybernetics
Show HN: GitShare – Turn GitHub repos into beautiful social media screenshots
I needed a tool to turn GitHub repos into nice screenshots (for social media) but couldn't find one that I liked. There are plenty for X and LinkedIn posts, but not many for GitHub repositories.I built a simple static web app (GitShare) where you paste any public repo URL, customize it live and then export as PNG/JPEG/WebP. It runs entirely in your browser (it uses GitHub's API client-side, so...
SSS does suffer though for some serious weaknesses, i.e. it trusts the shareholders. A cheating party can submit a fake share during reconstruction, corrupting the recovered secret, and honest parties have no way to detect this something that verifiable secret sharing fixes.
Anyway threshold crypto is a very elegant field and the math is there is really beautiful.