Tag

Security

14 Aug 20267 min read

Hardening Agent Sandboxes: MicroVMs, gVisor and WebAssembly for Untrusted Code

An AI agent running shell commands is an arbitrary code execution primitive you installed on purpose. Here is the isolation ladder — container, gVisor, Firecracker, WebAssembly — what each one actually stops, and what it costs per sandbox.

AI
Agents
Security

31 Jul 202613 min read

Senior Frontend Interview Prep, Part 5: The Object Model, Prototypes and Metaprogramming

Fifteen questions on what an object really is: prototype chains, property descriptors, what `class` desugars to, prototype pollution with a working exploit, and why `Proxy` and private fields do not get along.

Interviews
Fundamentals
Career