Comment by k8sToGo
3 days ago
Why do people run and install these agents locally? No container nothing. I am running Opencode in WSL2 with the windows mounts disabled.
3 days ago
Why do people run and install these agents locally? No container nothing. I am running Opencode in WSL2 with the windows mounts disabled.
So the idea is that these should be treated as programs in an extremely low trust environment, akin to running malware in a VM?
yes, this is basically experimental tech, if used with open source harnesses. if used with proprietary harnesses, treat as actual malware.
Technically open source harness like opencode is more "malwarey" than claude code for example because its default permissions are very open.
1 reply →
I never thought about it in that extreme, but just today the google results ai gave me conflicting information from one search to another. Maybe I should start.
P.S. the conflicting information was Keith Richard's age. One search said he was 37 Dec 18 1981, the other said he was 37 in 1980.
I treat all proprietary software as malware, though of course the risk surface varies
Yes, I think if agents as interns with enough smarts to be dangerous.
If the agent you are running really wanted to it could easily find a way to mount the windows folders and read them all. WSL isn't a security boundary, you are only barely more protected than people running grok in their home directory.
it is not about "security" but it is more about confinement. And how could it do that without sudo rights?
Still, you are barely more protected than someone running this as non root at home. By your same logic you could “confine” the agent to any arbitrary directory on your filesystem and say it’s sufficient.
2 replies →
Same reason one uses VSCode locally