HackerTrans
TopNewTrendsCommentsPastAskShowJobs

ATechGuy

no profile record

Submissions

Ask HN: The new wave of AI agent sandboxes?

12 points·by ATechGuy·4 miesiące temu·5 comments

Ask HN: The new wave of AI agent sandboxes?

3 points·by ATechGuy·4 miesiące temu·0 comments

Ask HN: Is anyone tracking AI traffic to their site? Should we care?

2 points·by ATechGuy·5 miesięcy temu·2 comments

Ask HN: Why) are you using AI to browse the web?

2 points·by ATechGuy·5 miesięcy temu·4 comments

Ask HN: (Why) are you using AI to browse the web?

1 points·by ATechGuy·5 miesięcy temu·2 comments

Google Chrome ships WebMCP, turning every website into a tool for AI agents

venturebeat.com
9 points·by ATechGuy·5 miesięcy temu·2 comments

Ask HN: If agentic AI is the future, why is every startup shipping a dashboard?

1 points·by ATechGuy·5 miesięcy temu·8 comments

In 2024, 51% of online activity came from bots

euractiv.com
3 points·by ATechGuy·5 miesięcy temu·0 comments

Ask HN: Have your views about AI / LLMs changed? What triggered it?

4 points·by ATechGuy·6 miesięcy temu·1 comments

Ask HN: Why are so many rolling out their own AI/LLM agent sandboxing solution?

32 points·by ATechGuy·6 miesięcy temu·18 comments

Ask HN: Do you agree with Groq founder that more compute will improve GenAI

3 points·by ATechGuy·9 miesięcy temu·0 comments

comments

ATechGuy
·4 miesiące temu·discuss
This is very useful. Thanks for sharing!
ATechGuy
·4 miesiące temu·discuss
+1
ATechGuy
·4 miesiące temu·discuss
You built https://github.com/FootprintAI/Containarium for this purpose?
ATechGuy
·5 miesięcy temu·discuss
TBH, this looks like an LLM-assisted response.
ATechGuy
·5 miesięcy temu·discuss
+1. It is confusing.
ATechGuy
·5 miesięcy temu·discuss
And how are you going to define what ocaps/flows are needed when agent behavior is not defined?
ATechGuy
·5 miesięcy temu·discuss
Interesting. I'd appreciate an example. Thanks!
ATechGuy
·5 miesięcy temu·discuss
Would love to see performance numbers with nested virtualization, particularly that of IO-bound workloads.
ATechGuy
·5 miesięcy temu·discuss
> a website can expose functions like searchProducts(query, filters) or orderPrints(copies, page_size) with full parameter schemas

How would this not create backend load and abuse?
ATechGuy
·5 miesięcy temu·discuss
That's a good start I'd say, but I agree with you that detection is not trivial. I wonder if there's enough value in distinguishing between AI agents (with full browser) and humans. What use cases would it enable?
ATechGuy
·5 miesięcy temu·discuss
Yes, but how can you tell if it was an agent with full browser?
ATechGuy
·5 miesięcy temu·discuss
Thanks for your insights!

QQ: does uxwizz also show AI agents visiting websites? have you seen traffic from AI agents?
ATechGuy
·5 miesięcy temu·discuss
I agree. However, how to define these permissions when agent behavior is undefined?
ATechGuy
·5 miesięcy temu·discuss
I understand the concern. However, you can customize the profile (e.g., allowlist) to only allow network access to required domains. Also, looks like your sandboxing solution is Docker based, which uses VMs on a Mac machine, but will not use VMs on a Linux machine (weak security).
ATechGuy
·5 miesięcy temu·discuss
That's right. But they (E2B) rely on the underneath Cloud infra to achieve high scalability. Personally, I'm still not sure about the value they add on top of Cloud hosted VMs. GCP/AWS already offer huge discounts to startups, which should be enough for VM-based sandboxing of agents in the MVP phase.
ATechGuy
·5 miesięcy temu·discuss
To the commenters here: thanks for correcting me! So AWS is losing AI sandboxing market to GCP due to high cold start times of EC2...very interesting!
ATechGuy
·5 miesięcy temu·discuss
You can customize curr_dir_access_profile.sb to block access to network/fs/etc. Why is this not enough?
ATechGuy
·5 miesięcy temu·discuss
sandbox-exec -f curr_dir_access_profile.sb markdownlint
ATechGuy
·5 miesięcy temu·discuss
Curious to know what made you DIY this?
ATechGuy
·5 miesięcy temu·discuss
These are all wrappers around VMs. You could DIY these easily by using EC2/serverless/GCP SDKs.