HackerTrans
TopNewTrendsCommentsPastAskShowJobs

ATechGuy

no profile record

Submissions

Ask HN: The new wave of AI agent sandboxes?

12 points·by ATechGuy·4 tháng trước·5 comments

Ask HN: The new wave of AI agent sandboxes?

3 points·by ATechGuy·4 tháng trước·0 comments

Ask HN: Is anyone tracking AI traffic to their site? Should we care?

2 points·by ATechGuy·5 tháng trước·2 comments

Ask HN: Why) are you using AI to browse the web?

2 points·by ATechGuy·5 tháng trước·4 comments

Ask HN: (Why) are you using AI to browse the web?

1 points·by ATechGuy·5 tháng trước·2 comments

Google Chrome ships WebMCP, turning every website into a tool for AI agents

venturebeat.com
9 points·by ATechGuy·5 tháng trước·2 comments

Ask HN: If agentic AI is the future, why is every startup shipping a dashboard?

1 points·by ATechGuy·5 tháng trước·8 comments

In 2024, 51% of online activity came from bots

euractiv.com
3 points·by ATechGuy·5 tháng trước·0 comments

Ask HN: Have your views about AI / LLMs changed? What triggered it?

4 points·by ATechGuy·6 tháng trước·1 comments

Ask HN: Why are so many rolling out their own AI/LLM agent sandboxing solution?

32 points·by ATechGuy·6 tháng trước·18 comments

Ask HN: Do you agree with Groq founder that more compute will improve GenAI

3 points·by ATechGuy·9 tháng trước·0 comments

comments

ATechGuy
·4 tháng trước·discuss
This is very useful. Thanks for sharing!
ATechGuy
·4 tháng trước·discuss
+1
ATechGuy
·4 tháng trước·discuss
You built https://github.com/FootprintAI/Containarium for this purpose?
ATechGuy
·5 tháng trước·discuss
TBH, this looks like an LLM-assisted response.
ATechGuy
·5 tháng trước·discuss
+1. It is confusing.
ATechGuy
·5 tháng trước·discuss
And how are you going to define what ocaps/flows are needed when agent behavior is not defined?
ATechGuy
·5 tháng trước·discuss
Interesting. I'd appreciate an example. Thanks!
ATechGuy
·5 tháng trước·discuss
Would love to see performance numbers with nested virtualization, particularly that of IO-bound workloads.
ATechGuy
·5 tháng trước·discuss
> a website can expose functions like searchProducts(query, filters) or orderPrints(copies, page_size) with full parameter schemas

How would this not create backend load and abuse?
ATechGuy
·5 tháng trước·discuss
That's a good start I'd say, but I agree with you that detection is not trivial. I wonder if there's enough value in distinguishing between AI agents (with full browser) and humans. What use cases would it enable?
ATechGuy
·5 tháng trước·discuss
Yes, but how can you tell if it was an agent with full browser?
ATechGuy
·5 tháng trước·discuss
Thanks for your insights!

QQ: does uxwizz also show AI agents visiting websites? have you seen traffic from AI agents?
ATechGuy
·5 tháng trước·discuss
I agree. However, how to define these permissions when agent behavior is undefined?
ATechGuy
·5 tháng trước·discuss
I understand the concern. However, you can customize the profile (e.g., allowlist) to only allow network access to required domains. Also, looks like your sandboxing solution is Docker based, which uses VMs on a Mac machine, but will not use VMs on a Linux machine (weak security).
ATechGuy
·5 tháng trước·discuss
That's right. But they (E2B) rely on the underneath Cloud infra to achieve high scalability. Personally, I'm still not sure about the value they add on top of Cloud hosted VMs. GCP/AWS already offer huge discounts to startups, which should be enough for VM-based sandboxing of agents in the MVP phase.
ATechGuy
·5 tháng trước·discuss
To the commenters here: thanks for correcting me! So AWS is losing AI sandboxing market to GCP due to high cold start times of EC2...very interesting!
ATechGuy
·5 tháng trước·discuss
You can customize curr_dir_access_profile.sb to block access to network/fs/etc. Why is this not enough?
ATechGuy
·5 tháng trước·discuss
sandbox-exec -f curr_dir_access_profile.sb markdownlint
ATechGuy
·5 tháng trước·discuss
Curious to know what made you DIY this?
ATechGuy
·5 tháng trước·discuss
These are all wrappers around VMs. You could DIY these easily by using EC2/serverless/GCP SDKs.