Capsem is a Rust-written hypervisor that runs each AI coding agent inside its own ephemeral, air-gapped Linux VM to provide strong isolation and visibility. It ships with preconfigured development environments (Python, Node.js, 30+ packages) and supports major agents like Claude, Gemini CLI, Codex and OpenAI. Each session boots a lightweight VM with a read-only root filesystem, no swap, no kernel modules and a tmpfs workspace; networking is air-gapped via a dummy NIC and fake DNS so nothing can reach the real network except through a host-side MITM proxy. Connections between host and guest use vsock endpoints for terminal I/O, HTTPS/MCP tool relay, and a native MCP endpoint exposes policy-checked tools (fetch_http, grep_http, http_headers, plus custom fastmcp servers).
Security is enforced by an inspecting MITM proxy on the host that terminates TLS with per-domain minted certificates, inspects full HTTP request and response bodies, applies domain/path/method policies, and logs everything to a per-session SQLite database for post-hoc analysis. Profiles define enforcement, detection (Sigma-compatible), MCP, plugin and asset rules while a corp-level config can lock down policies and reporting that users cannot override. Capsem uses Apple Virtualization.framework on macOS (Apple Silicon, macOS 14+) and KVM on Debian/Ubuntu, boots quickly, is open source under MIT, and plans features like VM checkpoint/restore and a VS Code extension.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Libreboot 26.10 introduces full UEFI support and adds support for 233 Intel/AMD Chromebooks using the EDK2 payload. The release features major design changes, including a new anti-AI policy and enhanced hardware compatibility. (libreboot.org)
X removed 13,000 accounts believed to be involved in election interference before the US midterms. The purge aims to prevent misinformation and foreign meddling during the election period. (theregister.com)
Ukraine has conducted strikes on a fourth Russian data center at Sberbank's facility in the Balakovo region. The attacks target critical infrastructure amid ongoing conflict, with implications for Russia's economic and military capabilities. (reuters.com)
Europe's dependence on US liquefied natural gas is increasing, with US supplying up to two-thirds of the EU's LNG by 2028. US officials have indicated that this reliance could be used strategically, raising concerns about energy security and reliability. (euobserver.com)
EU citizens' private messages are scanned for images and videos under the temporary 'Chat Control' law, with companies like Palantir involved in analyzing the data. Critics argue this law enables mass surveillance, while companies claim it helps combat child abuse. (arvidgrange.substack.com)
Noma Labs discovered a vulnerability in Claude Code Desktop's preview pane that allows arbitrary file reading and data exfiltration through malicious HTML embedded in public repositories. The exploit bypasses sandbox protections, enabling attackers to access sensitive credentials, secrets, and IP addresses. (noma.security)
Today's best Hacker News stories, summarized and screenshotted, one email a day.