81–90 of 110 posts
All you need is a separate limited user account on your computer. Multi-user Unix-y systems were designed for this kind of thing for decades.
My entire development environment is literally just "sudo".
People seem to come up with all manner of complicated setups with virtual machines or docker or whatever. All you need is a separate limited user account on your computer. Multi-user Unix-y systems were designed for this kind of thing for decades. My entire development environment is literally just "sudo".
or just have a linux vps and ssh in for $5 a month
People seem to come up with all manner of complicated setups with virtual machines or docker or whatever. All you need is a separate limited user account on your computer. Multi-user Unix-y systems were designed for this kind of thing for decades. My entire development environment is literally just "sudo".
your kernel is not isolate and if you accidentally run the wrong command in sudo you will nuke your computer lol or just have a linux vps and ssh in for $5 a month
People seem to come up with all manner of complicated setups with virtual machines or docker or whatever. All you need is a separate limited user account on your computer. Multi-user Unix-y systems were designed for this kind of thing for decades. My entire development environment is literally just "sudo".
your kernel is not isolate and if you accidentally run the wrong command in sudo you will nuke your computer lol or just have a linux vps and ssh in for $5 a month
I'm not seeing your point. Are you saying that I shouldn't use sudo because I might accidentally "run the wrong command"?
I know all the commands that I run and what they do.
> your kernel is not isolate
Am I more afraid of an npm package exploiting a zero day kernel vulnerability on my mac? Or just stealing my AWS keys and installing a crypto miner? Sudo suits my threat model just fine.
My m3 MacBook pro is a million times more powerful dev machine than a cheap $5 vps. Why would I waste my time with that.
I don't understand why I keep seeing posts like this, but nobody appears to know that DevContainers exist. In a Jetbrains IDE, for example, you check a devcontainer.json file into your repository. This file describes how to build a Docker image (or points to a Dockerfile you already have). When you open up a project, the IDE builds the Docker image, automatically installs a language-server backend into it, and launch…
Now, i run YOLO and haven't had any issue and my subscription lasts much longer with less token consumption!
Earlier quoted context omitted.
your kernel is not isolate and if you accidentally run the wrong command in sudo you will nuke your computer lol or just have a linux vps and ssh in for $5 a month
> if you accidentally run the wrong command in sudo I'm not seeing your point. Are you saying that I shouldn't use sudo because I might accidentally "run the wrong command"? I know all the commands that I run and what they do. > your kernel is not isolate Am I more afraid of an npm package exploiting a zero day kernel vulnerability on my mac? Or just stealing my AWS keys and installing a crypto miner? Sudo suits my t…
https://www.reddit.com/r/ClaudeAI/comments/1n1moqy/how_did_c...
https://www.reddit.com/r/ClaudeCode/comments/1sa3fx8/claude_...
https://old.reddit.com/r/ClaudeAI/comments/1jfidvb/claude_tr...
Earlier quoted context omitted.
> if you accidentally run the wrong command in sudo I'm not seeing your point. Are you saying that I shouldn't use sudo because I might accidentally "run the wrong command"? I know all the commands that I run and what they do. > your kernel is not isolate Am I more afraid of an npm package exploiting a zero day kernel vulnerability on my mac? Or just stealing my AWS keys and installing a crypto miner? Sudo suits my t…
yes you right, i assume you using claude code which can in fact accidentally run the wrong command https://www.reddit.com/r/ClaudeAI/comments/1n1moqy/how_did_c... https://www.reddit.com/r/ClaudeCode/comments/1sa3fx8/claude_... https://old.reddit.com/r/ClaudeAI/comments/1jfidvb/claude_tr...
Claude can run whatever commands it wants and the only harm it can do is nuke its own home directory. That's the whole point.
The fact that Claude can and does access files outside the PWD while asking for sudo to do things constantly seems to be a recipe for Anthropic scanning your system without your knowledge and saving that for 5 years if you decided to 'help improve Claude'. No, 'safety oriented' lab has a clause like that which can't be revoked historically. Anthropic, like the majority of 'don't be evil' firms is apart of the great m…
Exactly my worry, so I've bubblewrapped it on my computer. https://kaveh.page/blog/claude-code-sandbox