HackerTrans
TopNewTrendsCommentsPastAskShowJobs

ATechGuy

no profile record

Submissions

Ask HN: The new wave of AI agent sandboxes?

12 points·by ATechGuy·vor 4 Monaten·5 comments

Ask HN: The new wave of AI agent sandboxes?

3 points·by ATechGuy·vor 4 Monaten·0 comments

Ask HN: Is anyone tracking AI traffic to their site? Should we care?

2 points·by ATechGuy·vor 5 Monaten·2 comments

Ask HN: Why) are you using AI to browse the web?

2 points·by ATechGuy·vor 5 Monaten·4 comments

Ask HN: (Why) are you using AI to browse the web?

1 points·by ATechGuy·vor 5 Monaten·2 comments

Google Chrome ships WebMCP, turning every website into a tool for AI agents

venturebeat.com
9 points·by ATechGuy·vor 5 Monaten·2 comments

Ask HN: If agentic AI is the future, why is every startup shipping a dashboard?

1 points·by ATechGuy·vor 5 Monaten·8 comments

In 2024, 51% of online activity came from bots

euractiv.com
3 points·by ATechGuy·vor 5 Monaten·0 comments

Ask HN: Have your views about AI / LLMs changed? What triggered it?

4 points·by ATechGuy·vor 6 Monaten·1 comments

Ask HN: Why are so many rolling out their own AI/LLM agent sandboxing solution?

32 points·by ATechGuy·vor 6 Monaten·18 comments

Ask HN: Do you agree with Groq founder that more compute will improve GenAI

3 points·by ATechGuy·vor 9 Monaten·0 comments

comments

ATechGuy
·vor 4 Monaten·discuss
This is very useful. Thanks for sharing!
ATechGuy
·vor 4 Monaten·discuss
+1
ATechGuy
·vor 4 Monaten·discuss
You built https://github.com/FootprintAI/Containarium for this purpose?
ATechGuy
·vor 5 Monaten·discuss
TBH, this looks like an LLM-assisted response.
ATechGuy
·vor 5 Monaten·discuss
+1. It is confusing.
ATechGuy
·vor 5 Monaten·discuss
And how are you going to define what ocaps/flows are needed when agent behavior is not defined?
ATechGuy
·vor 5 Monaten·discuss
Interesting. I'd appreciate an example. Thanks!
ATechGuy
·vor 5 Monaten·discuss
Would love to see performance numbers with nested virtualization, particularly that of IO-bound workloads.
ATechGuy
·vor 5 Monaten·discuss
> a website can expose functions like searchProducts(query, filters) or orderPrints(copies, page_size) with full parameter schemas

How would this not create backend load and abuse?
ATechGuy
·vor 5 Monaten·discuss
That's a good start I'd say, but I agree with you that detection is not trivial. I wonder if there's enough value in distinguishing between AI agents (with full browser) and humans. What use cases would it enable?
ATechGuy
·vor 5 Monaten·discuss
Yes, but how can you tell if it was an agent with full browser?
ATechGuy
·vor 5 Monaten·discuss
Thanks for your insights!

QQ: does uxwizz also show AI agents visiting websites? have you seen traffic from AI agents?
ATechGuy
·vor 5 Monaten·discuss
I agree. However, how to define these permissions when agent behavior is undefined?
ATechGuy
·vor 5 Monaten·discuss
I understand the concern. However, you can customize the profile (e.g., allowlist) to only allow network access to required domains. Also, looks like your sandboxing solution is Docker based, which uses VMs on a Mac machine, but will not use VMs on a Linux machine (weak security).
ATechGuy
·vor 5 Monaten·discuss
That's right. But they (E2B) rely on the underneath Cloud infra to achieve high scalability. Personally, I'm still not sure about the value they add on top of Cloud hosted VMs. GCP/AWS already offer huge discounts to startups, which should be enough for VM-based sandboxing of agents in the MVP phase.
ATechGuy
·vor 5 Monaten·discuss
To the commenters here: thanks for correcting me! So AWS is losing AI sandboxing market to GCP due to high cold start times of EC2...very interesting!
ATechGuy
·vor 5 Monaten·discuss
You can customize curr_dir_access_profile.sb to block access to network/fs/etc. Why is this not enough?
ATechGuy
·vor 5 Monaten·discuss
sandbox-exec -f curr_dir_access_profile.sb markdownlint
ATechGuy
·vor 5 Monaten·discuss
Curious to know what made you DIY this?
ATechGuy
·vor 5 Monaten·discuss
These are all wrappers around VMs. You could DIY these easily by using EC2/serverless/GCP SDKs.