133 karma · joined February 15, 2020
We haven't open-sourced the control plane glue yet but it's something we're thinking about. browser-use itself is open source. The sandbox infra on top is the proprietary part for now.
The actual security model is the architecture itself: the sandbox runs in its own VM inside a private VPC. It has no AWS keys, no database credentials, no LLM API tokens. The only thing it can do is talk to the control plane, which validates every request and scopes every operation to that one session.
So even if you bypass all three hardening steps, you get a session token that only works inside that VPC, talking to a control plane that only lets you do things scoped to your own session. There's nothing to escalate to.
The bytecode removal, privilege drop, and env stripping are just there to make the agent's life harder if it tries to inspect its own runtime. Not the security boundary.
A TG bot also seems interesting ngl
Writing it down yourself is still the best option for me at this point. I feel on top of things.
The reddit page you posted was made quite some time after the initial post that went "viral" (https://www.reddit.com/r/sheets/comments/178kf81/tracking_fi...). I also haven't put much effort in growing it, sadly.
I understand you might think these people are fake but I am not here to try to prove you wrong. I know what I've built, I know how many people have signed up and requested a copy. What I will do however is fix the landing page so that less people think this is some sort of trick to get people to buy.
In any case, I really do appreciate the feedback!
And thanks for the kind words! You nailed it, it’s exactly what I wanted for people who don’t want to spend a weekend building a CLI just to track their groceries...
Sometimes a simple spreadsheet does the job!
But will try to make it more convincing!
This is just a side project I had since 5 years ago. And it just reminded me how simple things can be sometimes. No need to put AI everywhere.
In any case, the reviews are not fake, I talked to these people personally in search for feedback. I am not going to share their personal info ofc.
But will consider improving the site to not make it feel fake!