Readit News logoReadit News
molson8472 commented on Running Claude Code dangerously (safely)   blog.emilburzo.com/2026/0... · Posted by u/emilburzo
molson8472 · a month ago
Once approval fatigue and ongoing permission management kicks in, the temptation is strong to run `--dangerously-skip-permissions`. I think that's what we all want - run agents in a locked-down sandbox where the blast radius of mistakes and/or prompt injection attacks is minimal/acceptable.

I started running Claude Code in a devcontainer with limited file access (repo only) and limited outbound network access (allowlist only) for that reason.

This weekend, I generalized this to work with docker compose. Next up is support for additional agents (Codex, OpenCode, etc). After that, I'd like to force all network access through a proxy running on the host for greater control and logging (currently it uses iptables rules).

This workflow has been working well for me so far.

Still fresh, so may be rough around the edges, but check it out: https://github.com/mattolson/agent-sandbox

molson8472 commented on Crystal 0.29   crystal-lang.org/2019/06/... · Posted by u/bb1234
molson8472 · 7 years ago
I must have been living under a rock for the past five years, because Crystal went completely unnoticed until last week. As a long time Ruby programmer, I'm eager to give it a try.
molson8472 commented on How the Valley treats experienced people   rachelbythebay.com/w/2018... · Posted by u/zdw
alanning · 7 years ago
I wonder if part of the issue is a kind of unspoken fear that the “dream” outcome may not be as common as people want to believe. If I am a young developer with more stock options than salary I want to believe that I will have the option of retiring early. Seeing older devs who were not able to “cash out” plays poorly with that narrative.
molson8472 · 7 years ago
Nailed it.
molson8472 commented on Software Development Estimates: Where Do I Start?   diegobasch.com/software-d... · Posted by u/clarkm
molson8472 · 12 years ago
I really like this statement: "Every new piece of software is a machine that has never been built before. The process of describing how the machine works is the same as building the machine."

That's probably the best way of relating the problem to non-engineers that I've heard.

u/molson8472

KarmaCake day13May 29, 2010
About
Optimist · truth seeker · builder

http://mattolson.com

View Original