What's that?

lol you must be fresh to the internet

IIRC HN typically removes the "How" from article titles like these, presumably to avoid clickbait titles.

One of my favorites!

I'd love to be able to lock down the browser to only allow certain URLs (e.g. localhost) so I can give Claude (and other tools) carte blanche to use browser automation (rather than manually approving each command). Is this something on your radar / roadmap?

If using Claude Code, a simple hook can govern `browser_navigate` (mcp)

A custom sh script or something for whitelists would take ~5min to setup.

For more robust governance (many policies), you can write Rego using https://github.com/eqtylab/cupcake

https://code.claude.com/docs/en/hooks#mcp-tool-naming

Thank you for the links / info! I'm looking forward to digging into this.

fully aware of the "blast radius" risk of using claude to do stuff. i'm doing all my vibium dev in a vm using UTM (and you should, too!). wonder if there are some network rules we can add.

i did post a v2 roadmap on the github repo. might be time to start the draft for v3!

As I see it, the only real solution is to put it into a container that has a firewall with a short whitelist.

I was looking into this earlier -- presumably you'd also need to allowlist Claude itself (whatever endpoints it hits to run inference etc). VM firewall gets a little trickier with Claude's web search tool, too.

The solution I landed on recently was to locally modify the Chrome devtools MCP to launch the browser instance with strict network restrictions. I believe the implementation used `--host-resolver-rules`, blocking all URLs by default with an environment variable to control the allowlist (which, in hindsight, Claude can easily work around if it needs to -- I should probably just hard-code the allowlist).

> you'd also need to allowlist Claude itself

This is Anthropic's recommended setup for devcontainers:

https://github.com/anthropics/claude-code/blob/main/.devcont...

You may want to adapt it and particularly to remove the GitHub and VS Code stuff.

Maybe this is something: https://github.com/vibheksoni/stealth-browser-mcp

I use Navidrome [1] + an rclone'd S3 bucket on a Digital Ocean droplet. Works quite well for my purposes!

[1] https://github.com/navidrome/navidrome

This is incredible! I wouldn't have thought it was possible to cleanly separate tracks like that. I wonder to what extent the model is filling in gaps, akin to Samsung's "ultra zoom" moon.

Any notable examples you can share?

PDF was purposely a non-Turing adaptation of PostScript. Then they added JavaScript support.

"it's real nightmare material" (11:18)

Thanks for the recommendation, just downloaded a few episodes!;

I wish there was a link to the source of this information in the article! I'd like to read the updated version of these laws (if they're public).