shengpuerh

Finding vulns in popular OSS and disclosing is probably good for your reputation as a security researcher, even if it's not immediately profitable.

Same, this has been a challenge since my development machine also has access to banking/personal sensitive data. I would really like to run with `--dangerously-skip-permissions` (or equivalents) without too much worry.

Local VMs are heavyweight but useful if you are sandboxing an entire IDE/GUI app like Cursor. With containers it's somewhat annoying to share local files - Distrobox helps with GUI apps and mounting the home directory but loses sandboxing. I have been curious about Flatpak/bubblewrap, but haven't had time to try it.

For now I've settled on containers, but I would like to shift to a remote VM like I have at work.

Advertising is all about making you want something you don't need (e.g. for fear of being left behind). Would the want exist without silicon valley shoving it down people's throats by telling them to adapt or get left behind? I think the article uses "want" kind of loosely, because people do want to use AI and do, but I would guess that among AI users, subjective life satisfaction is is not always higher - especially if one feels compelled to do it.