How Are You Isolating AI Agents From Each Other in Kubernetes?
For those running AI agents in production on Kubernetes, what isolation boundary are you actually using between agents? Most deployments seem to place them in ordinary pods, which…
sandboxing
How do you keep coding agents from accessing unrelated environment variables?
When I run a coding agent locally, it can inherit the environment variables from the shell that launched it. That could expose API keys or credentials belonging to…
How Are You Safely Controlling What Coding Agents Can Execute?
I've been using Cursor with tools enabled much more lately, and the speed is great. What makes me nervous is that sometimes the only thing stopping a command…
How Are You Safely Controlling What Coding Agents Can Execute?
I've been using Cursor with tool access much more lately, and the speedup is great. What makes me uneasy is that destructive actions can be only one command…
How are you securing AI coding agents in proprietary repositories?
Our security team will not allow cloud AI agents to scan entire proprietary repositories or run with unrestricted access on developer machines, but the productivity benefits are becoming…
What’s the safest way to build an emulated SSH terminal for an ARG?
I'm creating a large online puzzle and would like one section to involve players connecting with a normal SSH client such as PuTTY to uncover lore or progress.…
How do you vet third-party AI agent skills before running them?
As autonomous coding agents become more common, developers are downloading third-party skill packages and configuration files that may include lifecycle scripts, shell commands, prompt-injection attempts, or broad system…
What’s the safest way to build an emulated SSH terminal for an ARG?
I'm designing a large online puzzle and would like one section to have players connect with an SSH client such as PuTTY to uncover lore or progress the…
How do you actually protect Python projects from malicious dependencies?
PyPI's package filtering and popularity signals don't seem sufficient anymore. A recent supply-chain incident involving a popular machine-learning ecosystem package showed that even widely used community projects can…
What Linux security measures should I use for untrusted client files?
I have been using Linux as my daily operating system for about two months. On Windows, I used antivirus software and Malwarebytes to scan files, and I regularly…
What's the best way to run user-submitted code with a Node.js Express backend?
I'm trying to create a platform similar to those live coding sites where users can submit code in multiple languages like Bash, Python, Rust, Ruby, etc., and see…
What Linux Distribution Is Best for Complete App Sandboxing?
I'm looking to switch from Windows to Linux and want to know which distribution is best for running each of my applications in isolation. I'm particularly focused on…
What's the Best Way to Run Python and C# Code Safely in a Web App?
I'm working on a website where users can run small snippets of Python and C# code, and I need to measure how long the code takes to execute.…
What’s the Best Way to Safely Run Python and C# Code in a Web App?
I'm building a website where users can execute small Python and C# snippets, but I need to measure the runtime of these processes. I found out that platforms…
Best Ways to Securely Use USB Drives in an Enterprise Environment
Hey everyone! We're looking for a security solution in our company where all USB sticks are automatically handled in a secure environment, ideally a sandbox or virtual machine,…
Can a Bare Linux Desktop Be Vulnerable to Malware?
If I have a basic Linux desktop set up without any servers or SSH installed, is there a realistic chance for malware or hackers to get into it?…
How do I properly sandbox Wine with Firejail?
I'm having trouble with sandboxing Wine using Firejail. I've set up a Firejail profile for Wine, which includes directives to limit access to various directories and to drop…