Developer Builds 20-Minute Disposable Sandbox After Near-Miss With AI Agent Code

·3 views

A developer narrowly avoided data loss when an AI agent produced a cleanup command that could have wiped his home directory instead of a project folder. The incident prompted him to move all agent-generated code experiments off his personal machine and onto a throwaway server with no credentials, no sudo access, and monitored outbound traffic. He published a roughly 45-line shell script for Debian/Ubuntu systems that sets up an unprivileged user, blocks cloud metadata endpoints, and logs all outbound network connections made by the agent. The setup takes around 20 minutes and is designed to work on any cheap VPS, cloud free tier, or spare device — not tied to any specific provider. The core principle is containment: if something goes wrong, the damage is limited to a disposable box that holds nothing of value.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Classic BLoC vs BlocSignal: How Flutter handles rapid .add() event calls

Flutter developers often worry that calling .add() multiple times in quick succession may cause events to overwrite each other before the UI can respond. In Classic BLoC, events are queued through Dart Streams, with each handler executing sequentially and the UI updating only on the next Flutter render frame. BlocSignal follows the same .add() and emit() API but replaces Streams with Signals, making handler execution synchronous so bloc.state reflects the new state immediately after .add() returns. In both implementations, no events are lost even when thousands are dispatched rapidly, because Flutter's markNeedsBuild() simply flags a widget as dirty once and rebuilds it once per frame using the latest state. The key distinction between the two approaches is propagation timing, not event reliability.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Builds Local-First Interview Prep Tool Using Go and Static HTML

A developer has created a self-hosted interview preparation system called a 'Local-First Interview Prep Gym,' built with Go's standard library and static HTML, requiring no accounts or external APIs. The tool addresses gaps in typical prep workflows by providing structured daily drills, pattern-recognition exercises, and code-reading training. Users can run different tracks from the command line, covering data structures, backend interview topics, and reading comprehension of code solutions. A rotating set of weekday specialty drills covers ten algorithm pattern families, while five core functions are practiced every session with a target completion time of under eight minutes. The project emphasizes consistency over intensity, with a minimum daily session of 20 minutes and a forward-only approach that eliminates catch-up pressure for missed days.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Step-by-Step Guide to Deploying the ELK Stack on Kubernetes with ECK

The Elastic Stack — comprising Elasticsearch, Logstash, Kibana, and Beats — enables real-time log collection, processing, storage, and visualization. A technical guide published on DEV Community walks through deploying the full stack on Kubernetes using the Elastic Cloud on Kubernetes (ECK) operator. The setup requires a Kubernetes cluster with at least three nodes and 4GB RAM each, along with kubectl and Helm configured and a domain for Kibana access. ECK automates Elasticsearch cluster configuration, scaling, and upgrades, while Logstash handles pipeline processing and Filebeat ships logs from each node. The guide covers operator installation, Elasticsearch cluster definition, credential retrieval, and Logstash pipeline configuration with Filebeat integration.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Engineering team cuts 1.2B-row query time from 2,100ms to 48ms using partitioning and caching

The engineering team behind Mattrx, a multi-tenant marketing-analytics SaaS, reduced dashboard KPI query latency from 2,100ms to 48ms on a 1.2-billion-row Azure SQL table. The original system ran raw aggregations across the entire table on every dashboard load, pushing database CPU to 78% under a peak load of around 3,200 requests per second from 110,000 monthly active users. The solution involved three key architectural changes: partitioning the CampaignEvents table by day, applying clustered columnstore indexing for compression and batch-mode aggregation, and pre-computing daily KPI rollups so dashboards query summaries instead of raw events. A Redis cache layer with a 30-second TTL was added on top to serve the hottest dashboard requests in roughly 2ms. After the changes, peak database CPU dropped to 22% and working memory shrank from 2.1GB to 380MB.

0 comments Read more at DEV Community