Tagged articles

bubblewrap

3 articles · Page 1 of 1

Oct 23, 2026 · Information Security

Claude Code's allowNestedUserNamespaces: Fixing Chromium Breaks Outer Sandbox File Boundary

This article analyzes Claude Code's allowNestedUserNamespaces setting, explaining how enabling it to support Chromium and rootless Podman weakens the outer sandbox's file protections, compares three workarounds with different security trade-offs, and provides a decision framework based on asset sensitivity and trust domains.

ChromiumClaude CodeConfiguration

0 likes · 28 min read

Claude Code's allowNestedUserNamespaces: Fixing Chromium Breaks Outer Sandbox File Boundary

Tech Musings

Aug 31, 2026 · Cloud Native

Securing DeepSeek Harness in Multi-Tenant Containers: Removing Filesystem Plugins to Reduce Attack Surface

The author details removing filesystem tool plugins from DeepSeek Harness (DSH) to secure multi-tenant container deployments, covering plugin architecture, overlay-based disabling, impact on 6 tools, real-model attack testing showing bash as a residual channel mitigated by sandbox fail-closed behavior, and resource metrics showing negligible savings.

Attack SurfaceContainer SecurityDeepSeek Harness

0 likes · 15 min read

Securing DeepSeek Harness in Multi-Tenant Containers: Removing Filesystem Plugins to Reduce Attack Surface

AI Insight Log

Jan 17, 2026 · Information Security

How the Django Co‑founder Used Claude to Reverse‑Engineer Its Own Sandbox

Simon Willison instructed Claude Cowork to explore its own application bundle, revealing that the AI runs inside a full Ubuntu 22.04 virtual machine on macOS via Apple’s Virtualization.framework, protected by a dual sandbox of VM isolation and Bubblewrap, with strict user and syscall restrictions.

AI securityClaudeCowork

0 likes · 6 min read

How the Django Co‑founder Used Claude to Reverse‑Engineer Its Own Sandbox