Dirk Holtwick

@holtwick
491 Followers
284 Following
336 Posts

Indie developer. Privacy first. Local first.

Earth → Europe → Germany → Ruhrpott

Websitehttps://holtwick.de
Githubhttps://github.com/holtwick/
Brie.fi/ng Video Chat Projecthttps://brie.fi/ng
Die @informatik hat das neue .inf Magazin veröffentlicht. Danke, dass ich mit dem Artikel "Commit für das Gemeinwohl" dabei sein durfe.🧡🙏 Spoiler: Es geht um die #Petition zur Anerkennung von #OpenSource Arbeit als #Ehrenamt. #Barrierefrei als PDF laden oder lesen: https://inf.gi.de/ #FOSS #TYPO3
Commit für das Gemeinwohl

Ja, Open-Source-Arbeit zählt noch immer nicht als Ehrenamt. Open-Source-­Entwickler Boris Hinzer hat eine Petition an den Deutschen Bundestag ­gestartet, die das ändern soll. Das steckt dahinter.

Your AI coding assistant has the same file access as you. Comfortable? Me neither.

📦 bx sandboxes any app to the project directory — using macOS kernel-level isolation. Works with Claude Code, VSCode, Xcode, Terminal and any other tool.

"AI Coding Tools in a Sandbox: Why Your File System Needs Protection"
https://holtwick.de/blog/bx-sandbox

#sandbox #security #macOS #AI #vscode #xcode #terminal

Dirk Holtwick | Dirk Holtwick

Software developer for web, mobile and other platforms. Strong focus on privacy enhancement.

Dirk Holtwick
@jerome Why can't you use it? I did not intentionally limit it to macOS 26. I just only tested it with the latest version of macOS. Thanks for the link. Claude has that too. But I also wanted to protect the tools around it, like VSCode.
@jerome I did not do any security research, but from my experience these tools will access whatever they like if you tell them. And they also they start CLI tools which do not have any limits. And they start MCP servers and use skills where nobody knows what they do and who wrote them. And you may have private config and keys on your computer like SSH or API keys. And so on... I sleep better, if these tools are in a cage ;) They are still not limited in their usefulness by this fencing.

bx - the macOS dev sandbox - is now at v0.9!

🔧 Custom apps via ~/.bxconfig.toml — add Cursor, Zed, whatever you like
🖥️ Xcode support
📂 Multiple workdirs in one session
🔍 Auto-discovers apps via macOS bundle IDs
⚡ Detects already running apps instead of launching duplicates

Really happy to see people picking this up. Would love to hear what apps you're sandboxing or what's missing. 💬

https://github.com/holtwick/bx-mac

#macOS #security #sandbox #opensource #devtools #ClaudeCode

GitHub - holtwick/bx-mac: Sandbox any macOS app — only your project directory stays accessible

Sandbox any macOS app — only your project directory stays accessible - holtwick/bx-mac

GitHub
No more AI yolo on your Mac! 🛡️
AI tools like Claude Code can read, write and delete any file your user can access. bx-mac gives you a native macOS sandbox to restrict any command to just the folders it actually needs. No Docker, no VM – just Seatbelt.
https://github.com/holtwick/bx-mac
#macOS #opensource #security #AI #Apple #mac #privacy
GitHub - holtwick/bx-mac: Sandbox any macOS app — only your project directory stays accessible

Sandbox any macOS app — only your project directory stays accessible - holtwick/bx-mac

GitHub
@bubbles Congratulations 🥳
Why I Built Bubbles 🫧 — Bens Beautiful Blog 🫧

@marKusylac @adfc_ob_mh Ich habe gerade ein Antwort von der Stadt MH bekommen, die ich so verstanden habe, dass das Ordnungsamt nun ein Überholverbot für die Liebigstraße beschlossen habe. Eine vorgeschlagene Fahrradstraße dort würde nicht kommen, da der RS1 erweitert würde. Insgesamt bin ich positiv überrascht über das Ergebnis und freue mich, wenn die Situation dort etwas entschärft wird, da dort wirklich viel Radverkehr durchkommt aufgrund des fehlenden RS1 Ausbaus. Danke für die Inspiration!