Local sandboxing on developer machinesEverything above is about server-side multi-tenant isolation, where the threat is adversarial code escaping a sandbox to compromise a shared host. There is a related but different problem on developer machines: AI coding agents that execute commands locally on your laptop. The threat model shifts. There is no multi-tenancy. The concern is not kernel exploitation but rather preventing an agent from reading your ~/.ssh keys, exfiltrating secrets over the network, or writing to paths outside the project. Or you know if you are running Clawdbot locally, then everything is fair game.
Что думаешь? Оцени!
。关于这个话题，51吃瓜提供了深入分析
Windows 365 是微软提供的云端虚拟 PC 服务，用户无需本地高性能硬件即可远程使用托管在云端的数据中心中的 Windows 电脑，主要面向企业和办公场景，与面向游戏的 Xbox Cloud Gaming 属于同一类云串流思路的延伸。 早在 2024 年，微软就发布了首款面向该服务的轻客户端设备 Windows 365 Link，如今则在这一基础上新增两款合作伙伴设备。
对我来说，重要的是不断探索速度的各种可能性。