Didn’t Israel use AI to target Hamas agents?

You would think, following the absolute horror that was, that any civilized nation would not use such a tool in such capacity.

Or rather, it showed it was working wonderfully for cases where war crimes is a goal.

Why wouldn't they? There's been very little repercussions for anyone so far. Apart from the Netherlands bracing itself for sanctions from America because the ICC dared to suggest someone might have done something wrong.

Check out nono.

They already exists. You haven’t been invited? Hmmmmm

It’s not that bad: https://news.ycombinator.com/bestcomments

I really like that page. I've recently attached a search feature to it with corresponding atom feed.

https://hackertrain.future-secured.com/?q=great

One thing that's changed over time is a lot more usage of "scare quotes" especially now (Gemini agrees https://share.gemini.google/UiUf0jttZLVD ). It's an interesting phenomenon, Abloh started using quotation marks consistently in his fashion branding since 2012. https://blakecrosley.com/blog/design-philosophy-virgil-abloh

Next step would be to attach an AI to all the /bestcomments.. if someone needs help doing that I'm here. Really, that's a task for the mods.

Why they instead of a microVM?

MicroVMs make the most sense to me, as they are the simplest and cleanest abstraction. I personally use VMs with a mounted github repo and found it to be the simplest mental model. I block all network access except for the domains that the agent needs to talk to, and I remove sudo. Since its all scripted, the VM is easy to drop and recreate and I know exactly whats installed on it.

Drop is interesting because it is thinking about the approach differently - basically an extension of the user's existing userspace. This prevents files from being inadvertently deleted by the agent, but it doesn't prevent the agent from uploading files that it shouldn't be.

How does it compare to kagent (https://kagent.dev/)?

smolvm integrates with k8s (https://smolmachines.com/docs/guides/kubernetes-in-a-microvm...) and can mount s3 buckets (https://smolmachines.com/docs/local/machine-lifecycle-cli-re...).

I wouldn’t dismiss smolvm so fast. It brings together many ideas that make the whole very interesting.

What do you mean by "It doesn’t provide isolation" ? How so ?

This post explains how a GPT agent broke out of qemu VM. It could not break out of firecracker.

https://blog.trailofbits.com/2026/08/26/vms-wont-contain-cyb...

Why? Firecracker mounts very few host systems into the VM, exposing minimal host code to malicious guests. Qemu and smolvm expose much more.

So yeah, smolvm is more like a docker or qemu alternative, definitely useful but NOT relevant to the discussion of sandboxing malicious code

But smolvm provides kernel-level isolation. Much closer to firecracker than docker.

If your networking stack and filesystem and who knows what else are exposed to the guest, its not isolation.

It’s better than Docker, but it can’t be compared to Firecracker at all. Firecracker actually minimizes the attack surface whereas smolvm does not

I thought the whole point of a microVM is that it does provide isolation ?

For microVM, smolvm is quite impressive.

For further isolation, I like to use nono inside a smolvm instance.

I always thought it was bold for people to post anything using their real identity.

You never know if a stance you have now will be frowned upon in 5 or 10 years from now.

I’ve heard you can’t pass customs with a phone without your social network accounts.

You don't need to post under your real name to be IDed.

It's trivial to acquire a list of real people tied to email addresses, phones, social media. And that's what's out there for "normal" businesses.

Who knows what kind of tooling is available to people who serve on the boards of tech giants?

Maybe not all customs are created equally, but flying between Toronto and the states I have never had to show my phone let alone my social accounts. Also never seen that going up through customs.

Land of the … laugh … free!