Последние новости
2026-02-27 00:00:00:03014246510http://paper.people.com.cn/rmrb/pc/content/202602/27/content_30142465.htmlhttp://paper.people.com.cn/rmrb/pad/content/202602/27/content_30142465.html11921 本版责编：董丝雨
，推荐阅读51吃瓜获取更多信息
Local sandboxing on developer machinesEverything above is about server-side multi-tenant isolation, where the threat is adversarial code escaping a sandbox to compromise a shared host. There is a related but different problem on developer machines: AI coding agents that execute commands locally on your laptop. The threat model shifts. There is no multi-tenancy. The concern is not kernel exploitation but rather preventing an agent from reading your ~/.ssh keys, exfiltrating secrets over the network, or writing to paths outside the project. Or you know if you are running Clawdbot locally, then everything is fair game.。关于这个话题，heLLoword翻译官方下载提供了深入分析
�@�O���[���X�^�C�������ւ������������Ƃ́AAI�Ő��\���̃v���W�F�N�g�������������ƍl���Ă����Ƃ����B�����ɑ��ē����́A�܂���5�ɍi���Ďn�߂��悤���������B�������̃v���Z�X�͓����f�[�^�\�[�X���g���A�K�v�Ƃ������X�L�����ꕔ���ʂ��Ă������߂��B�����Ȕ͈͂ʼnۑ����o���Ă������ƂŁA�{�i�I�ȓW�J�ɂȂ��₷���Ȃ��B