Cool project! I think there would be a lot of value in just having a mode that logs all the file operations a script tries to make. Great work!
Show HN: Zerobox – Sandbox any command with file, network, credential controls
101–108 of 108 posts
Re: Show HN: Zerobox – Sandbox any command with file, network, credential controls
#102Re: Show HN: Zerobox – Sandbox any command with file, network, credential controls
#103[deleted]
Re: Show HN: Zerobox – Sandbox any command with file, network, credential controls
#104This is really useful! How well does it compare though to Docker etc. Because I am worried about sandbox escapes. This is what we currently use to sandbox JS inside Browsers and Node (without anything extra) : https://github.com/Qbix/Platform/blob/main/platform/plugins/... I like tools like this, but they all seem to share the same underlying shape: take an arbitrary process and try to restrict it with OS primitives…
[dead]
Re: Show HN: Zerobox – Sandbox any command with file, network, credential controls
#105This is really useful! How well does it compare though to Docker etc. Because I am worried about sandbox escapes. This is what we currently use to sandbox JS inside Browsers and Node (without anything extra) : https://github.com/Qbix/Platform/blob/main/platform/plugins/... I like tools like this, but they all seem to share the same underlying shape: take an arbitrary process and try to restrict it with OS primitives…
[dead]
Re: Show HN: Zerobox – Sandbox any command with file, network, credential controls
#106[dead]
Re: Show HN: Zerobox – Sandbox any command with file, network, credential controls
#107[dead]
Re: Show HN: Zerobox – Sandbox any command with file, network, credential controls
#108We've seen cases where filesystem sandboxing alone wasn't enough — outbound requests still allowed credential exfiltration attempts.