Post B8fs19mJ37fhCLUM6K by ariadne@social.treehouse.systems
(DIR) More posts by ariadne@social.treehouse.systems
(DIR) Post #B8fqiwYXN0mv1XndiK by ariadne@social.treehouse.systems
1 likes, 0 repeats
RE: https://omg.wtf.sh/@cibyr/116977035270641922gotta say the vibe coders really are willing to do a line of copium instead of accepting that they've built the wrong thingRT: https://omg.wtf.sh/users/cibyr/statuses/116977035270641922
(DIR) Post #B8fr0DynqJARz9KEqW by ariadne@social.treehouse.systems
1 likes, 0 repeats
vibe coders: "mythos-class models will 100x the amount of kernel vulnerabilities discovered"also vibe coders: "our sandbox is only designed to prevent erroneous rm -rf /"
(DIR) Post #B8fr7mvUJKBgOgNiIC by poliorcetics@social.treehouse.systems
0 likes, 0 repeats
@ariadne I’m not surprised, I feel like if you have embraced vibe coding you were probably not interested in coding high quality software to start with and were only motivated by getting your current use case to work with little long term planning
(DIR) Post #B8frAiqpuybkcxbZJI by ariadne@social.treehouse.systems
0 likes, 0 repeats
100x more kernel vulnerabilities? sounds scary, maybe they should plan around that?
(DIR) Post #B8frHA5VZ8QGq0XQ4e by ariadne@social.treehouse.systems
0 likes, 0 repeats
vibe coders: "our advanced full spectrum cyber model broke out of its sandbox and hacked a competitor!!!! our bad!"also vibe coders: "our sandbox is only designed to prevent erroneous rm -rf /"
(DIR) Post #B8frVlqFzgYJz4N25Q by joshbressers@infosec.exchange
0 likes, 0 repeats
@ariadne this all reeks of Thatcher’s “there is no alternative” which is code for “shut up and let me destroy society “
(DIR) Post #B8frYIct4c92F4K4Xo by ariadne@social.treehouse.systems
0 likes, 0 repeats
thanks for the job security, I guess?
(DIR) Post #B8fs19mJ37fhCLUM6K by ariadne@social.treehouse.systems
0 likes, 0 repeats
when you read 'sandbox', do you consider that to mean there is a real security boundary?
(DIR) Post #B8fs4SkywZQ4vbRgzw by dysfun@social.treehouse.systems
0 likes, 0 repeats
@ariadne depends who's saying it.
(DIR) Post #B8fsRd80Y75HkrGMFs by dvshkn@social.treehouse.systems
0 likes, 0 repeats
@ariadne I didn't look myself, but I heard there were some real gems in the claude code source leak in terms of bespoke rm -rf heuristics
(DIR) Post #B8fsrYCrTEom1GtQQa by ariadne@social.treehouse.systems
0 likes, 0 repeats
@dysfun yes, and my point is that it's bullshit that grifters are allowed to bend the meanings of words
(DIR) Post #B8ftCixgg5qFSQtLZA by ariadne@social.treehouse.systems
0 likes, 0 repeats
@BalooUriza @dysfun that is not what the industry in 2026 uses as terms. it's all "sandbox".
(DIR) Post #B8ftOhwIIzCllGxE36 by jjj@functional.cafe
0 likes, 0 repeats
@ariadne In general, no, as in not hardened and locked down against malicious zero-day-happy agents. But I think the word is used for securely locked down things sometimes?
(DIR) Post #B8ftcjublcnLvyrACu by lanodan@queer.hacktivis.me
0 likes, 0 repeats
@ariadne No but only because so far I've managed to escape them all.
(DIR) Post #B8fu4tf377nAHL0OMS by gsuberland@chaos.social
0 likes, 0 repeats
@ariadne heavily contextual.
(DIR) Post #B8fuBxB4RE41DCLdRY by dysfun@social.treehouse.systems
0 likes, 0 repeats
@ariadne @BalooUriza and as long as i can remember, a sandbox has always supposed to have been an actual security mechanism. until this recent bubble nonsense, of course.
(DIR) Post #B8fuvPdXTTF4VXLA3M by wordshaper@weatherishappening.network
0 likes, 0 repeats
@ariadne I did until the AI bros started using the word…
(DIR) Post #B8fuyU3JVskp4UrQbg by rk@well.com
1 likes, 1 repeats
@ariadne Cognitive scientists: By definition is would be impossible to prevent a super intelligence from escapingPeople in 2005: I simply would not allow it to escape. People in 2025: Why sure, Claude, you can execute that script you wrote in /tmp
(DIR) Post #B8fvVqBIGBuHG6V09g by ariadne@social.treehouse.systems
0 likes, 0 repeats
@davidgerard @amarioguy @dysfun @BalooUriza lmao when all this shit went down i just linked to both blogs in our "sales pipeline building" slack channel
(DIR) Post #B8fvz4TiBPIXzx3IQq by virtulis@loud.computer
0 likes, 0 repeats
@ariadne in a local context it's probably a "best effort" at preventing very basic attacks or accidents, or an extra layer of cheese in case more specific protections fail.In a service context it's "not a production environment". Likely less secure because of lower importance.In llm bullshit context it's "do not be insecure" prefixed to unsanitized input.
(DIR) Post #B8fy8CKCZw4cqg5FYG by jpm@aus.social
0 likes, 0 repeats
@ariadne have you seen what a sandbox does in the real world after it gets used? Sand goddamn everywhere outside of it. And sometimes there’s a poo left inside it.
(DIR) Post #B8g0wohwLVgKHKS4Zs by faoluin@chitter.xyz
1 likes, 1 repeats
@ariadne "Other engineers have given up, you should too"
(DIR) Post #B8g8noejy3rv95ArZI by rotopenguin@mastodon.social
0 likes, 0 repeats
@ariadne alias rm="echo haha whoops that was a close one"
(DIR) Post #B8gRXP8GzjKMTssMCm by drunkenmadman@aus.social
0 likes, 0 repeats
@ariadne answered "no" because it might be a security boundary, or it might not. It depends.For example, I've heard Python virtualenvs described as a sandbox, which they're totally not. They're just dependency packaging. Docker containers too, which can potentially be a sandbox, but can also be poked holes into with ports and volumes and the like.
(DIR) Post #B8gd8jDGOifcyCD4jo by ariadne@social.treehouse.systems
0 likes, 0 repeats
@poliorcetics @cibyr why would you vibe code that when you can literally set it up as an automation in basically any home automation system
(DIR) Post #B8ggFwGeYi5tLcvQci by cibyr@omg.wtf.sh
0 likes, 0 repeats
@ariadne @poliorcetics that's...what I did? It's not like there's a button in home assistant for "automatically find the right threshold for a bathroom fan and this humidity sensor". I could point-and-click through the automation UI, or write some yaml (probably with a static threshold), or try to find something someone else has built (hope they have the same assumptions and preferences as me!), or sit down and learn how to write a home assistant integration, or ..just ask claude to do it. WCGW?
(DIR) Post #B8gioPrZEKSstGl8iG by ariadne@social.treehouse.systems
0 likes, 0 repeats
@poliorcetics @cibyr I dunno, you said "vibe coded in 5 minutes"
(DIR) Post #B8glGeRMpCzo7O5zpw by wouter@mastodon.simply-life.net
0 likes, 0 repeats
@ariadne I'm missing "Not anymore" as an option
(DIR) Post #B9wuCvuygBv5DwxErA by ariadne@social.treehouse.systems
0 likes, 0 repeats
@rk @shanecelis "oops"
(DIR) Post #B9wztJj13U3CzfOBTU by shanecelis@mastodon.gamedev.place
0 likes, 0 repeats
@ariadne @rk AMERICANS: Aww, it tricked me! It said I could eat cake and lose weight, but I haven't lost any despite the new wars. But just think how much worse it would have been if it was a liberal super intelligence.
(DIR) Post #B9x3CeNEo8ASOo73XE by ariadne@social.treehouse.systems
0 likes, 0 repeats
@rk @shanecelis clearly the Americans should consume more peptides