Gemini CLI vulnerability allows hackers to execute hidden malicious commands

arstechnica.com

8 pointswitnessme3 comments

I’m considering containerising all of my development environment, and having Zed/VSCode work in the container via SSH. Obviously containers are not completely blast proof but it would give me peace of mind knowing that the LLM can’t go rogue and nuke my home dir.

Did you try it? How was your experience?

I did a little experiment but I probably need to write a script or tool to ease the friction.

If I want to work on a new project in Zed, assuming each project has its own container, I have to create a container with the mount, have it publish sshd on a random port, then invoke Zed or configure it to connect to that random port.

Reply on news.ycombinator.com