Hacker News: PtrMzkhttps://news.ycombinator.com/user?id=PtrMzkHacker News RSShttps://hnrss.org/hnrss v2.1.1Sun, 27 Sep 2026 11:08:35 +0000<![CDATA[New comment by PtrMzk in "Show HN: Drop – A rootless Linux sandbox with gVisor support"]]>MicroVMs make the most sense to me, as they are the simplest and cleanest abstraction. I personally use VMs with a mounted github repo and found it to be the simplest mental model. I block all network access except for the domains that the agent needs to talk to, and I remove sudo. Since its all scripted, the VM is easy to drop and recreate and I know exactly whats installed on it.

Drop is interesting because it is thinking about the approach differently - basically an extension of the user's existing userspace. This prevents files from being inadvertently deleted by the agent, but it doesn't prevent the agent from uploading files that it shouldn't be.

]]>Tue, 22 Sep 2026 22:23:13 +0000https://news.ycombinator.com/item?id=49809073PtrMzkhttps://news.ycombinator.com/item?id=49809073https://news.ycombinator.com/item?id=49809073<![CDATA[New comment by PtrMzk in "AI is getting cheaper more quickly than any other transformative tech in history"]]>It will be near zero when we get frontier like performance in models running on laptops. Basically the cost of electricity + one-time cost of hardware.

]]>Tue, 22 Sep 2026 22:12:58 +0000https://news.ycombinator.com/item?id=49808937PtrMzkhttps://news.ycombinator.com/item?id=49808937https://news.ycombinator.com/item?id=49808937