141–147 of 147 posts
Earlier quoted context omitted.
Yeah, I'm sure the reality is that a basic setup is fine for most casual development. The average user isn't concerned with security and we've basically normalized data breaches. If you have backups, use git, and manually approve Claude's access and actions, that's likely "good enough". The problem is you start getting comfortable and tired of your workflow getting interrupted when the agent needs more/repeated acces…
Makes a lot of sense. Thanks!
Earlier quoted context omitted.
Not really, its more like saying no one needs another windows when linux exists. By "no one needs" i mean the world needs open source sandbox building blocks that are up to the challenges of the current age, no closed source solution can be a fundamental building block for the world to become better and more secure. No non-local building block can be at the foundation to anything that makes the world better and more…
That's a very narrow and technical person's point of view. You might need it open source, the majority of the world doesn't care, like they don't care Windows is closed source, or like AWS is a "cloud" running somewhere else. Both of them are building blocks that made "the world better and more robust".
If you don't care that's fine. You go run the Claude Code "sandbox" and let it put your entire home directory on a public pastebin. Anthropic guarantee it will exfiltrate your data in the most secure way possible.
The rest of us want verifiable sandboxes which we can fix if they are wrong.
If an agent deletes something important (e.g. database), can you undo it? Does it automatically backup before making changes?
If that database is stored on the transactional filesystem available to the sandboxes, yes! Instead of backing up, it utilizes an efficient snapshot mechanism (lakeFS under the hood).
I had to dig hard to find this is a SAAS sandbox offering not an actual sandbox (the software i can use locally). Its just wasting peoples time, no one needs a non opensource sandbox. There are now at least 3 apache 2 projects (smolmachines, microsandbox, boxlite) working on sandboxes and at least one of them should be ready for primetime soon.