Hacker News Reader

Or OpenAI can adequately sandbox / access control the backend compute so RCE isn’t a path to lateral movement

Defense in depth here would have been adequate

Defense in depth + defense in breadth - aka. all of the above

sandbox escapes have been the rage recently

Not firecracker

please don't jinx it

Yeah, isn’t that Claude Codes sandbox? That drops and every npm install it taking over the world, lol.

No, it is sandboxed by Bubblewrap on Linux and Seatbelt on Mac