HackerTrans
TopNewTrendsCommentsPastAskShowJobs

ATechGuy

no profile record

Submissions

Ask HN: The new wave of AI agent sandboxes?

12 points·by ATechGuy·4 месяца назад·5 comments

Ask HN: The new wave of AI agent sandboxes?

3 points·by ATechGuy·4 месяца назад·0 comments

Ask HN: Is anyone tracking AI traffic to their site? Should we care?

2 points·by ATechGuy·5 месяцев назад·2 comments

Ask HN: Why) are you using AI to browse the web?

2 points·by ATechGuy·5 месяцев назад·4 comments

Ask HN: (Why) are you using AI to browse the web?

1 points·by ATechGuy·5 месяцев назад·2 comments

Google Chrome ships WebMCP, turning every website into a tool for AI agents

venturebeat.com
9 points·by ATechGuy·5 месяцев назад·2 comments

Ask HN: If agentic AI is the future, why is every startup shipping a dashboard?

1 points·by ATechGuy·5 месяцев назад·8 comments

In 2024, 51% of online activity came from bots

euractiv.com
3 points·by ATechGuy·5 месяцев назад·0 comments

Ask HN: Have your views about AI / LLMs changed? What triggered it?

4 points·by ATechGuy·6 месяцев назад·1 comments

Ask HN: Why are so many rolling out their own AI/LLM agent sandboxing solution?

32 points·by ATechGuy·6 месяцев назад·18 comments

Ask HN: Do you agree with Groq founder that more compute will improve GenAI

3 points·by ATechGuy·9 месяцев назад·0 comments

comments

ATechGuy
·4 месяца назад·discuss
This is very useful. Thanks for sharing!
ATechGuy
·4 месяца назад·discuss
+1
ATechGuy
·4 месяца назад·discuss
You built https://github.com/FootprintAI/Containarium for this purpose?
ATechGuy
·5 месяцев назад·discuss
TBH, this looks like an LLM-assisted response.
ATechGuy
·5 месяцев назад·discuss
+1. It is confusing.
ATechGuy
·5 месяцев назад·discuss
And how are you going to define what ocaps/flows are needed when agent behavior is not defined?
ATechGuy
·5 месяцев назад·discuss
Interesting. I'd appreciate an example. Thanks!
ATechGuy
·5 месяцев назад·discuss
Would love to see performance numbers with nested virtualization, particularly that of IO-bound workloads.
ATechGuy
·5 месяцев назад·discuss
> a website can expose functions like searchProducts(query, filters) or orderPrints(copies, page_size) with full parameter schemas

How would this not create backend load and abuse?
ATechGuy
·5 месяцев назад·discuss
That's a good start I'd say, but I agree with you that detection is not trivial. I wonder if there's enough value in distinguishing between AI agents (with full browser) and humans. What use cases would it enable?
ATechGuy
·5 месяцев назад·discuss
Yes, but how can you tell if it was an agent with full browser?
ATechGuy
·5 месяцев назад·discuss
Thanks for your insights!

QQ: does uxwizz also show AI agents visiting websites? have you seen traffic from AI agents?
ATechGuy
·5 месяцев назад·discuss
I agree. However, how to define these permissions when agent behavior is undefined?
ATechGuy
·5 месяцев назад·discuss
I understand the concern. However, you can customize the profile (e.g., allowlist) to only allow network access to required domains. Also, looks like your sandboxing solution is Docker based, which uses VMs on a Mac machine, but will not use VMs on a Linux machine (weak security).
ATechGuy
·5 месяцев назад·discuss
That's right. But they (E2B) rely on the underneath Cloud infra to achieve high scalability. Personally, I'm still not sure about the value they add on top of Cloud hosted VMs. GCP/AWS already offer huge discounts to startups, which should be enough for VM-based sandboxing of agents in the MVP phase.
ATechGuy
·5 месяцев назад·discuss
To the commenters here: thanks for correcting me! So AWS is losing AI sandboxing market to GCP due to high cold start times of EC2...very interesting!
ATechGuy
·5 месяцев назад·discuss
You can customize curr_dir_access_profile.sb to block access to network/fs/etc. Why is this not enough?
ATechGuy
·5 месяцев назад·discuss
sandbox-exec -f curr_dir_access_profile.sb markdownlint
ATechGuy
·5 месяцев назад·discuss
Curious to know what made you DIY this?
ATechGuy
·5 месяцев назад·discuss
These are all wrappers around VMs. You could DIY these easily by using EC2/serverless/GCP SDKs.