← Back to context

Comment by wslh

4 hours ago

I assume an standard way to do this is through a VM provided by the recruiter, right?

I don't think you should trust the recruiter's VM any more than their code. Spin up instead your own disposable VM or container with no creds or host mounts.

Clearly, judging by recent openai news, sandboxes are not unbreakable, but at least there's nothing worth stealing and you throw it away afterward.

  • I assume a VM that is running in the cloud will be enough. Not thinking about a local one.