@b0rk how do you manage to sandbox it? Iβve always wondered about sandboxing something like this
Top-level
@b0rk how do you manage to sandbox it? Iβve always wondered about sandboxing something like this 5 comments
@bnut the real secret though is to present an extremely low-value attack target so it's not worth people's effort to try to break into @b0rk nice! Iβll take a look at your bubblewrap post, thanks! I guess in addition to malicious code thereβs also poorly written code taking down the server, haha. @bnut there's a 1 second timeout too, I talk about in the project's blog post / about page @b0rk nice, and itβs good to see that the bubblewrap post deals with launch times, that was my main question about using Docker |
@bnut i used bubblewrap (which i wrote about here) https://jvns.ca/blog/2022/06/28/some-notes-on-bubblewrap/ but you could also just use docker