Hacker News new | ask | show | jobs
by e1g 104 days ago
Claude: can escape its sandbox (there are GitHub issues about this) and, when sandboxed, still has full read access to everything on your machine (SSH keys, API keys, files, etc.)

Codex: IIRC, only shell commands are sandboxed; the actual agent runtime is not.

1 comments

Cool, thanks for explaining!