Conversation

Notices

1. Embed this notice
   James Morris (jmorris@social.kernel.org)'s status on Wednesday, 10-Jun-2026 00:42:54 JST James Morris

   • Jarkko Sakkinen
   @jarkko nice!
   
   RE: https://social.kernel.org/objects/89a9d649-aed7-412b-afa6-f3a334a08ef0
   • Embed this notice
     James Morris (jmorris@social.kernel.org)'s status on Thursday, 11-Jun-2026 02:20:42 JST James Morris

     in reply to

     • Jarkko Sakkinen
     @jarkko Interesting take ;-) You are probably right but I tried it once in the 90s and did not enjoy.
   • Embed this notice
     Jarkko Sakkinen (jarkko@social.kernel.org)'s status on Thursday, 11-Jun-2026 02:20:43 JST Jarkko Sakkinen

     in reply to

     • Jarkko Sakkinen
     @jmorris And despite being critical about Microsoft as a company, Landstrip also proactively supports Win32 security mechanisms. Not many of these sandboxes do. macOS, Linux and Windows are all equally supported.
     James Morris likes this.
   • Embed this notice
     Jarkko Sakkinen (jarkko@social.kernel.org)'s status on Thursday, 11-Jun-2026 02:20:43 JST Jarkko Sakkinen

     in reply to

     • Jarkko Sakkinen
     @jmorris Actually I love whenever I have a chance to do something with Win32 API :-) It's well documented and well engineered and usually solutions are not a dissapointment. I think overall it is an engineering achievement having been relevant and backwards compatible such a long span of time.
   • Embed this notice
     Jarkko Sakkinen (jarkko@social.kernel.org)'s status on Thursday, 11-Jun-2026 02:20:44 JST Jarkko Sakkinen

     in reply to
     @jmorris Thanks James :-) Your endorsement means a lot to me!
   • Embed this notice
     Jarkko Sakkinen (jarkko@social.kernel.org)'s status on Saturday, 13-Jun-2026 01:44:45 JST Jarkko Sakkinen

     in reply to
     @jmorris With coding agents, we're in a situation where we have bad behaving processes by design. So they need sandboxing, but it is in the level of preventing them going "over the top". I.e. a different scenario where you have actor that proactively tries to exploit your system :-) What I'm trying to do is to get a single binary that can address that level of brickwalls for agents, with a cross-os compatible policy - not to be the "IMAX prison".
     
     To make something meaningful I thought that being Anthropic policy format driven but with a more serious sandbox implementation is pretty good way to move forward on hardening this ecosystem.
     James Morris likes this.