For years after testifying as the lead software expert in a Toyota unintended acceleration trial, I kept returning to the idea of writing a sci-fi novel about the mass weaponization of embedded systems:
What if the possible compiler supply chain attack that Ken Thompson alerted us to has already been deployed?
The result is METACOMPILER, a plausibly true techno-thriller built on ideas from real projects I've consulted on and testified about as well as common unpatched vulnerabilities. The computer science is legit. The vulnerabilities are real. Only the characters are fictional.
The protagonist is a deaf-blind computer scientist whose neural implants let her perceive the electromagnetic spectrum. Following the death of her boyfriend in a car that was remotely commanded to accelerate, Kali uncovers a compiler-level backdoor in 11 billion processors, each carrying three hidden commands: INFO, PEEK, and POKE.
There has been a lot of examples of how to sandbox Claude Code and other agentic tools on HN lately. I decided to look into the options and realized Claude Caude already has a sandbox feature that I never saw mentioned among the suggestions. It uses bubblewrap/sandbox-exec[0] and is baked into Claude Code itself. Does anyone have experience with it compared to more DIY options? The obvious downside I can see is I need to put all my trust in Claude Code as compared to running it completely inside some environment..
For years after testifying as the lead software expert in a Toyota unintended acceleration trial, I kept returning to the idea of writing a sci-fi novel about the mass weaponization of embedded systems:
What if the possible compiler supply chain attack that Ken Thompson alerted us to has already been deployed?
The result is METACOMPILER, a plausibly true techno-thriller built on ideas from real projects I've consulted on and testified about as well as common unpatched vulnerabilities. The computer science is legit. The vulnerabilities are real. Only the characters are fictional.
The protagonist is a deaf-blind computer scientist whose neural implants let her perceive the electromagnetic spectrum. Following the death of her boyfriend in a car that was remotely commanded to accelerate, Kali uncovers a compiler-level backdoor in 11 billion processors, each carrying three hidden commands: INFO, PEEK, and POKE.