Hacker News Reader

I am curious how the sandbox handles potentially malicious code. For example, what would happen if someone tried to run something like a crypto miner or a DDoS script?

View on HN

Code running in the Claude environment can't make outbound network connections to anything more than a tiny list of domains (GitHub, PyPI, NPM) so DDoS targets are limited.

If I was Anthropic I'd have measures in place to rate limit network traffic from individual containers.

This would be interesting to test in a controlled way, curious what the CPU/time/memory quotas per run, isolation method, and syscall filtering look like.

Would appreciate pointers to any documentation or tests.

Reply on news.ycombinator.com