Medium Reviews

Bubblewrap Reviews

Medium mentions (3088)

• I built a privacy-first crypto portfolio tracker after the Ledger breach

  Back in the day I used the now-defunct site coin.fyi or coinexplorers.com to track my portfolio. When they disappeared, I looked at the alternatives — and none of them adapted to my necessities. The main one: a private, encrypted portfolio management platform in the style of ProtonMail. One where the service provider itself cannot see what I hold. So I decided to create my own.... - Source: Hacker News / about 23 hours ago

• Must actively fund open source AI [pdf]

  Insurance companies basically are banks, in that while they make low profit margins they wield such vast amounts of capital, some of which they invest in, they might as well be financial service institutions. There's also other categories of entities (pharmacy benefit managers, wholesalers and distributors) that also get a cut.... - Source: Hacker News / 2 days ago

• The Tower Keeps Rising

  A friend of mine built just built a project for doing something like that, although it's built on enforcing a spec rather than elegance: https://medium.com/@joeldg/architecting-out-of-the-vibe-how-to-enforce-compliance-in-ai-coded-apps-42b9d0113321. - Source: Hacker News / 3 days ago

• Can't English be considered an indigenous Indian language, asks Supreme Court

  It's do with the education policy - My Neighbour’s Language: Can We Overcome the NEP's 'Hindi Imposition' Through Regional Solidarities? - https://thewire.in/education/hindi-imposition-nep-regional-language-learning How CBSE's Three-language Policy Excludes French, Erasing Puducherry's Cultural Memory -... - Source: Hacker News / 3 days ago

• Ask HN: What Are You Working On? (July 2026)

  Https://github.com/Cyoda/cyoda-go Business objects as state machines. The idea is to reduce the number of moving parts and simplify processing architecture when building apps that need to be transactionally rigorous and scalable. It stems from the patterns we used to successfully apply in banks, which worked really well. I believe it's an effective way to get shit done in a broad class of systems. You just need to... - Source: Hacker News / 5 days ago

Bubblewrap mentions (48)

• GPT 5.6

  Typically I just want to isolate the agent disallowing it from accessing other parts of the filesystem. Using a different user might be enough, but I typically use [bubblewrap](https://github.com/containers/bubblewrap). - Source: Hacker News / 8 days ago

• pseudoroot, fakeroost, hakoniwa... How to deal with unpriviledge packaging?

  A third way sort of in between, that I'm using in crossdev-stages already, is to leverage more modern linux features to have both sandboxing AND the illusion of being root. Hakoniwa and bubblewrap are the best tools to achieve that. - Source: dev.to / 15 days ago

• Jamesob's guide to running SOTA LLMs locally

  It depends - for what? If your security model is sandboxing an agent to ensure they don't nuke your PC, then there are a lot of options, you can use something like bubblewrap[1] or a microVM like libkrun[2] if your goal is light-weight, up to full Docker if you want the tooling that comes with that. [1] https://github.com/containers/bubblewrap [2] https://github.com/libkrun/libkrun. - Source: Hacker News / 14 days ago

• GLM-5.2 is the step change for open agents

  I use both the openai subscription and the opencode go subscription. I use the go subscription for my personal work and the openai subscription for my consulting work. The differences between the models are minimal, but I usually stick with gpt-5.4-mini, gpt-5.4, mimo-pro-2.5, deepseek-v4-pro. These latter ones have way more usage than even using 5.4-mini so I tend to use them in personal projects for that reason.... - Source: Hacker News / 25 days ago

• Launch HN: Freestyle: Sandboxes for AI Coding Agents

  Https://github.com/containers/bubblewrap?tab=readme-ov-file For hardware virtualized machines it much harder but you can do it via:. - Source: Hacker News / 3 months ago