sayzardApr 29

Lee Robinson (@leerob)

Cursor SDK를 활용해 로컬에서 어떤 모델이든 연결한 해킹 가능한 에이전트를 만들 수 있고, 관리형 클라우드 에이전트 위에 제품도 배포할 수 있다는 소개입니다. 하네스, 샌드박싱, 컴퓨터 사용, 데모 영상, GitHub 연동 등을 처리해 개발 편의성을 높입니다.

https://x.com/leerob/status/2049522118757331426

#cursor #sdk #agents #cloud #sandboxing

Lee Robinson (@leerob) on X

The Cursor SDK can be used to both: 1. Build local, hackable agents with any model 2. Ship products on top of managed cloud agents It handles the harness, sandboxing, computer use, demo videos, GitHub integration, etc. Super cool.

X (formerly Twitter)
9to5Linux [Unofficial]Apr 8

Flatpak 1.16.4 Linux App Sandboxing Framework Brings Important Security Fixes

https://fed.brid.gy/r/https://9to5linux.com/flatpak-1-16-4-linux-app-sandboxing-framework-brings-important-security-fixes

GTech BoosterApr 3
Flutterwave update to Transfers Rates API goes into effect on 8th April
#Payments #API #Flutterwave #Sandboxing #Update
https://gtechbooster.com/flutterwave-update-to-transfers-rates-api-goes-into-effect-on-8th-april/?fsp_sid=1151
Flutterwave update to Transfers Rates API goes into effect on 8th April

Effective April 8, 2026, the rate field in the Transfer Rates API response is inverting its direction. Here is what you need to know, what to check, and the recommended migration path.

GTech Booster
Mathieu VirbelMar 31

Linux + greywall: read .env, substitute placeholders live, write temp file, bind-mount into sandbox. Agent sees zero friction.

macOS? No bind mount. sandbox-exec doesn't support it. Looking at FUSE.

#sandboxing #ai #security

Mathieu VirbelMar 25
A malicious LiteLLM package landed on PyPI with a solid plan: steal credentials, exfiltrate them, pivot through Kubernetes. Only problem? A bug in the payload caused it to fork-bomb itself on every Python subprocess. It never got past step one.
We walked through what would have happened if the malware had actually worked, and how sandboxing stops each stage. greyhaven.co/insights/how-greywall-prevents-every-stage-of-the-litellm-pypi-supply-chain-attack
#supplychainattack #sandboxing #infosec
Mathieu VirbelMar 25
If you're sandboxing with Bubblewrap/namespaces, are you bind-mounting /run read-only? Docker, Podman, and libvirt sockets live in /run (or /var/run symlinked to /run), and Unix socket connections bypass read-only restrictions. #linux #sandboxing #greywall
Mathieu VirbelMar 20
Turns out GVFS can route file ops through D-Bus, bypassing Landlock entirely. Fixed it in greywall today. Still figuring out how many IPC tunnels are hiding in a standard Linux session. #sandboxing
Hacker NewsMar 9

FreeBSD Capsicum vs. Linux Seccomp Process Sandboxing

https://vivianvoss.net/blog/capsicum-vs-seccomp

#HackerNews #FreeBSD #Seccomp #Sandboxing #Capsicum #Linux #Security

Capsicum vs seccomp: Process Sandboxing — Vivian Voss

A compromised process inherits the full authority of the user who launched it. Two operating systems fixed this with opposite philosophies. One removed the doors. The other posted a bouncer.

Vivian Voss
N-gated Hacker NewsFeb 27
👀 So, here's 18 minutes of pure geeky bliss where we pretend #sandboxing is as thrilling as bungee jumping. 🏗️ Let's endlessly list things like namespaces, #cgroups, and #gVisor while forgetting that 99% of readers are now asleep. 😴 Keep your kernels close, folks, because apparently, they’re the rockstars of this yawn-fest. 🎸
https://www.shayon.dev/post/2026/52/lets-discuss-sandbox-isolation/ #geekybliss #techhumor #HackerNews #ngated
Let's discuss sandbox isolation

A dive into the spectrum of sandboxing and isolation, from Linux namespaces and gVisor to hardware-enforced microVMs and WebAssembly, and why picking the right boundary matters for multi-tenant workloads.

Shayon Mukherjee
HabrFeb 23

Заметки на полях: Изолируем Lua окружение в C++ приложении. Часть 3/3

В прошлый раз мы с вами остановились на том, что на всякую хитрую резьбу в виде ограничений на загрузку функционала библиотек и сторонних модулей, а также изоляции скриптов внутри разрешённых путей найдётся свой болт, в лице возможностей самого языка, которые позволяют осознанно или в силу кривизны рук свести на нет все наши усилия сохранить стабильность. В этой части разберём как из букв 'О', 'П', 'Ж' и 'А' while true do end ...составить слово "СЧАСТЬЕ".

https://habr.com/ru/articles/991960/

#c++ #lua #разработка_игр #песочницы #sandboxing #изоляция_ресурсов #скриптовые_языки

Заметки на полях: Изолируем Lua окружение в C++ приложении. Часть 3/3

Окончание неожиданно распухшего туториала, который начался здесь и имел неосторожность продолжится тут . Не трогай, это на новый год Прежде чем переходить к ограничению потребляемой памяти, сначала...

Хабр