Hacker News Reader

This was my first thought: sandboxing is gonna be tricky for such project.

Not really, with SELinux, which is what TIO uses. TIO can be deployed pretty much anywhere SEL is supported. Instructions here: https://github.com/TryItOnline/tiosetup

Reply on news.ycombinator.com