undefined | Better HN

0 pointsdirkc2d ago0 comments

Do you run those projects on the host system as your normal user without any isolation?

0 comments

Yes, which makes me very vulnerable to supply chain attacks.

dirkcOP2d ago

Yikes! I had a scare once, and since then I only run sandboxed code or scripts I've written with minimal 3rd party deps.

I assume you have other mitigations in place?

simonw2d ago

Not really. I have good backups and I try to stick with dependencies I trust.

I do a lot of my development work using Claude Code for web which means stuff runs in containers on Anthropic's servers, but I run things on my laptop most days as well.

j / k navigate · click thread line to collapse

0 comments

simonw2d ago

Yes, which makes me very vulnerable to supply chain attacks.

dirkcOP2d ago

Yikes! I had a scare once, and since then I only run sandboxed code or scripts I've written with minimal 3rd party deps.

I assume you have other mitigations in place?

simonw2d ago

Not really. I have good backups and I try to stick with dependencies I trust.

I do a lot of my development work using Claude Code for web which means stuff runs in containers on Anthropic's servers, but I run things on my laptop most days as well.

j / k navigate · click thread line to collapse