[flyingshelf]

I'm dying to have proper sandboxing in macOS. I installed ChatGPT, I asked it to list files in my user directory and it did. I never gave it permission, how could it? My terminal has access and honestly it shouldn't either.

[smachiz]

your terminal shouldn't have access to your user directory? As in the files owned by you?

[janderson215]

It was only like 1 year ago that the loudest complaint about macOS were complaining about needing to click Allow in a new dialog when they use Terminal (or various other apps).

There are so many comments in here that are calling for nerfing something widely revered for giving us superpowers. Whether these are bots or not, they’re giving off NPC energy.

If they don’t want to use power tools because they accidentally cut off their finger, then they should just unplug their own power tools and stop clamoring for everybody else’s to be unplugged, too.

[flyingshelf]

Hello, are you aware that ALL the software you run on your computer can silently access your clipboard? Have you ever copied sensitive data? Perhaps a password?

Anyway, what I'm asking is a native way to run software in a real sandbox. It's really not a big deal to grant access when asked. Have you used any mobile OSes in the past 20 years? It's the default there and I can be certain that any random utility cannot read my clipboard or user directory without consent.

[janderson215]

>> are you aware that ALL the software you run on your computer can silently access your clipboard? Have you ever copied sensitive data?

I use the clipboard regularly and do not use software I don’t trust. If I do run risky software and am compromised, I understand that I took the risk and am responsible for leaving my front door open. Separately but related, I am in favor of severe punishment of the perpetrators of scams and exploitation.

If you want to have walls put around your software, then you have to build them.

I admit I had a knee jerk reaction because I’m frustrated general with a pattern of adults wanting to abdicate responsibility. I apologize for my irreverence. Maybe there is a way the OS can offer these protections you want without nerfing the rest of the world and putting an invisible ceiling on everybody. I think the “Run as Administrator” option in the context menu is pretty elegant. Maybe there could be a “Run in a container” version that excludes access to things like clipboard, external directories, and other non-essential assets. If that is enough to stem the desire to spread the “protective” reach of the machines of loving grace, then you have my vote.

What I DON’T want is to be prompted by the OS every time I want to paste something into a 3rd party app. Think about how much more momentum that gives the platforms to portray 3rd party software as potentially untrustworthy. At the risk of mind-reading, I don’t think that is a world that you would want to live in. I hope that people are more considerate of the potential downsides before they wish for these changes.

[embedding-shape]

> If they don’t want to use power tools because they accidentally cut off their finger, then they should just unplug their own power tools and stop clamoring for everybody else’s to be unplugged, too.

Sadly, the pendulum keeps swinging in the way of the tools actually being unplugged and dumbed down in favor of these screaming people, rather than leaving things alone so the rest of us professionals can continue to (safely) do our jobs with the already somewhat restricted tools we have.

[flyingshelf]

I run Claude in that terminal. No, it shouldn't. Not without a prompt. This is how you get worms stealing your keys via some build tool you just run.

[yearolinuxdsktp]

Was it Codex or the desktop ChatGPT agent?

[flyingshelf]

It was the standard ChatGPT chat app. I asked for commands and it ran them directly (after confirming)

[janderson215]

This is purely a /you/ problem and it’s /you’re/ responsibility to put up the infinite number of arbitrary guardrails you require. Use a container.