Aug 31, 2026 · Cloud Native

Securing DeepSeek Harness in Multi-Tenant Containers: Removing Filesystem Plugins to Reduce Attack Surface

The author details removing filesystem tool plugins from DeepSeek Harness (DSH) to secure multi-tenant container deployments, covering plugin architecture, overlay-based disabling, impact on 6 tools, real-model attack testing showing bash as a residual channel mitigated by sandbox fail-closed behavior, and resource metrics showing negligible savings.

DeepSeek HarnessMulti-tenancyYAML overlay

0 likes · 15 min read

Securing DeepSeek Harness in Multi-Tenant Containers: Removing Filesystem Plugins to Reduce Attack Surface

AI Insight Log

Jan 17, 2026 · Information Security

How the Django Co‑founder Used Claude to Reverse‑Engineer Its Own Sandbox

Simon Willison instructed Claude Cowork to explore its own application bundle, revealing that the AI runs inside a full Ubuntu 22.04 virtual machine on macOS via Apple’s Virtualization.framework, protected by a dual sandbox of VM isolation and Bubblewrap, with strict user and syscall restrictions.

AI securityClaudeCowork

0 likes · 6 min read

How the Django Co‑founder Used Claude to Reverse‑Engineer Its Own Sandbox

bubblewrap

Securing DeepSeek Harness in Multi-Tenant Containers: Removing Filesystem Plugins to Reduce Attack Surface

How the Django Co‑founder Used Claude to Reverse‑Engineer Its Own Sandbox