oh! Yeah I don't dev on my laptops anymore. I have clang for just-in-case but I do everything on dev VMs on remote boxes w/ luks. Which is why I try to keep an eye on kernel vulns, especially in virtualization space, because I don't want some neatly sandboxed shit to escape. Also I run my own actions runners, but those are on throwaway VPSs, same with bot harnesses.
No way those bots are going to break out of my jail and find they're in a lush area, no sir. Gonna be in a desert. A jail in a jail.
oh! Yeah I don't dev on my laptops anymore. I have clang for just-in-case but I do everything on dev VMs on remote boxes w/ luks. Which is why I try to keep an eye on kernel vulns, especially in virtualization space, because I don't want some neatly sandboxed shit to escape. Also I run my own actions runners, but those are on throwaway VPSs, same with bot harnesses.
No way those bots are going to break out of my jail and find they're in a lush area, no sir. Gonna be in a desert. A jail in a jail.