Hacker News new | ask | show | jobs
by Me1000 594 days ago
This is the real value here. Keeping a secure environment to run untrusted code along side user data is a real liability for them. It's not their core competency either, so they can just lean on browser sandboxing and not worry about it.
1 comments

How is doing it server side a different challenge than something like google collab or any of those Jupyter notebook type services?
Shared resources and multitenancy are how you get efficiency and density. Those are at direct odds with strict security boundaries. IME you need hardware supported virtualization for consistent security boundary of arbitrary compute. Linux namespaces (“containers”) and language runtime isolation are not it for critical workloads, see some of the early aws nitro/firecracker works for more details. I _assume_ the cases you mentioned may be more constrained, or actually backed by VM partitions per customer.
Google Collab are all individual VMs. It seems Anthropic doesn’t want to be in the “host a VM for every single user” business.