�������ǂނɂ́A�R�����g�̗��p�K���ɓ��ӂ��u�A�C�e�B���f�B�AID�v�����сuITmedia NEWS �A���J�[�f�X�N�}�K�W���v�̓o�^���K�v�ł�
更多详细新闻请浏览新京报网 www.bjnews.com.cn
，推荐阅读safew官方下载获取更多信息
2、申琦等：《踌躇的絮语：老年人大模型使用中的“提问沟”》
2 days agoShareSave
Local sandboxing on developer machinesEverything above is about server-side multi-tenant isolation, where the threat is adversarial code escaping a sandbox to compromise a shared host. There is a related but different problem on developer machines: AI coding agents that execute commands locally on your laptop. The threat model shifts. There is no multi-tenancy. The concern is not kernel exploitation but rather preventing an agent from reading your ~/.ssh keys, exfiltrating secrets over the network, or writing to paths outside the project. Or you know if you are running Clawdbot locally, then everything is fair game.