Hacker News Reader

Defense in depth + defense in breadth - aka. all of the above

sandbox escapes have been the rage recently

Not firecracker

please don't jinx it

Yeah, isn’t that Claude Codes sandbox? That drops and every npm install it taking over the world, lol.

No, it is sandboxed by Bubblewrap on Linux and Seatbelt on Mac