Analysis of a prompt injection attack bypassing Claude Code Opus 5 Auto Mode, highlighting the need for sandboxing coding agents.
Testing smolvm 1.8.3 as a sandbox for untrusted Python & JavaScript, using hardware-isolated VMs with resource limits and no network.
Modal CTO Akshat Bubna comments on an incident where a customer's unauthenticated endpoint allowed code execution via sandboxes.
Guide on sandboxing coding agents by using a separate user account to improve security and prevent damage from rogue AI.
Release of micropython-wasm 0.1a2, a Python library for running a MicroPython sandbox using WebAssembly, with a new CLI.
Release of micropython-wasm 0.1a2, a Python library for running MicroPython sandboxes using WebAssembly with a new CLI.
Announcing datasette-agent-micropython 0.1a0, a MicroPython WASM sandbox for safe code execution in Datasette Agent.
Announcement of micropython-wasm 0.1a1, a Python library for running MicroPython sandboxes using WebAssembly.
Announcement of micropython-wasm 0.1a1, a Python library for running a MicroPython sandbox using WebAssembly.
Announcing micropython-wasm 0.1a0, a Python library for running MicroPython in a WebAssembly sandbox via wasmtime.
Simon Willison announces micropython-wasm 0.1a0, a Python library to run MicroPython in a WebAssembly sandbox via wasmtime.
Overview of Anthropic's sandbox techniques for Claude across products like Claude.ai, Claude Code, and Cowork.
An overview of how Anthropic contains Claude across products using sandbox techniques like gVisor, Seatbelt, Bubblewrap, and VMs.
A comprehensive guide exploring different sandboxing techniques for safely running untrusted AI code, including containers, microVMs, and WebAssembly.
A comprehensive guide to different sandboxing technologies for safely running untrusted AI code, covering containers, microVMs, gVisor, and WebAssembly.
Explores MicroQuickJS, a tiny JavaScript engine for embedded systems, as a potential sandbox for running untrusted code with strict resource limits.
Introducing ClientIsolationHost, a new component for the Isolator framework that enables executing sandboxed code plugins on remote machines over TCP/IP.
Explores the unique security risks of Agentic AI systems, focusing on the 'Lethal Trifecta' of vulnerabilities and proposed mitigation strategies.
A developer's status update covering their university dissertation on unprivileged FUSE mounting, pimsync bug fixes, and ongoing work on JMAP client support for calendars and contacts.
Introduces App Buddy, a macOS utility for managing settings, backups, and permissions for the developer's other applications.
