upvote

points

by 999_cirno6 hours ago |
comments
upvoteby DrewADesign4 hours ago|
next
[-]
>> I feel like we're back to 1990's security here.

> vibe code your own wrapper around the OS API

Maybe stick with one of the existing projects? Throwing out all of the edge cases and hardening that went into a security-related project just to burn a bunch of resources to generate a worse one you have to maintain yourself is 90s-level security with 2026-level inefficiency, IMO.

reply
upvoteby 999_cirno4 hours ago|
parent|
next
[-]
Of course, if you're not comfortable with reading or designing code, or don't feel like tinkering, you can use an existing project and they work great

But it is to note that the OS APIs do the heavy lifting, the projects are just wrappers

reply
upvoteby DrewADesign3 hours ago|
parent|
[-]
Generally, assuming an RYO solution is a reasonable first approach is is a trap beginners fall into.
reply
upvoteby pmontra27 minutes ago|
parent|
next
[-]
RYO is the best way to learn, if you have the time to learn. After building one own solution one is able to assess the strengths and weaknesses of what other more experienced people built. Without the learning phase those other solutions are incomprehensible black boxes. The trick is not to skip the phase in which one researches available solutions.
reply
upvoteby 999_cirno3 hours ago|
parent|
prev|
[-]
Strong StackOverflow "don't do anything new, god forbid you may actually learn something" vibes

On "Hacker" News of all places :)

reply
upvoteby ben_w3 hours ago|
parent|
[-]
> don't do anything new, god forbid you may actually learn something

vs

> vibe code your own wrapper around the OS API

reply
upvoteby 999_cirno2 hours ago|
parent|
[-]
In fact, I suggest reviewing the documentation to assess your own level:

https://developer.apple.com/documentation/virtualization/run...

If the below sounds too complex to work with, can review more basics first. Can start with a Swift tutorial

  virtualMachine.start(completionHandler: { (result) in
      if case let .failure(error) = result {
           fatalError("Virtual machine failed to start with \(error)")
      }
  })
reply
upvoteby iririririr2 hours ago|
parent|
prev|
[-]
all community projects (specially the ones maintained or opensourced by model owners) will certainly have the security-convenience trade offs set all the way to convenience while advertising all the (off by default) security features
reply
upvoteby NamlchakKhandro26 minutes ago|
prev|
[-]
"Apple Containers"

I love how people say this like Apple finally created a native solution...

They didn't. It's just a linux vm running normal docker engine.

reply
upvoteby sunnybeetroot1 minutes ago|
parent|
[-]
How else do you want people to refer to Apple’s tool called container?
reply