>1) Have faith (always run it with 'dangerously skip permissions', even on important resources like your production server and your main dev machine.
I thought the article was a satire after I read this ... but it wasn't!
I thought the article was a satire after I read this ... but it wasn't!
Still not convinced it is not satire.
So now I use a docker compose setup where I install Claude and run it in a container. I map source code volumes into the container. It uses a different container with dnsmasq with an allowlist.
I initially wanted to do HTTP proxying instead of DNS filtering since it would be more secure, but it was quite hard to set it up satisfactorily.
Running CLI programs with the dangerous full permissions is a lot more comfortable and fast, so I'm quite satisfied.
> If you're from infosec, you might want to stop reading now — the rest of this article isn't going to make you any happier. Keep your medication close at hand if you decide to continue...