brig v0.3.0 is out.
Rootless Linux support, simpler setup and local app previews.
Thanks to @anan0s , @alexsapran, Maria Gkoutha, @pmoust and Vangelis Katsikaros.
Thanks also @p80n_sec of @EndorLabs for reporting the security issue.
Bookmark this if you run Claude Code / Codex with auto-approve.
Your agent can rm, curl, and leak keys. Sandbox map:
Local microVM (real VM on your machine)
• Docker Sandboxes - sbx run claude
• shuru - ephemeral, offline by default
• Brood Box - microVM + review diffs before they land
• Brig - open-source microVM, curated agent profiles
# curl -fsSL https://t.co/IdYS9q8u99 | sh
Cloud (agent runs elsewhere)
• E2B - Firecracker, SDK-first (most used for products)
• Daytona - persistent agent workspaces
• Vercel Sandbox / Modal - hosted code exec
Weaker (shared kernel)
• DevContainers / plain Docker - fine for deps, not a blast-radius wall
Pick by job:
laptop agent → Docker SBX / shuru / Brig
Product feature → E2B
Claude Desktop is now available on Linux (Ubuntu and Debian) in beta.
Alongside the browser and terminal, you now get a first-class desktop experience with Claude Code, Claude Cowork, and chat on all paid plans.
Nine years at @elastic , shipping the #observability products other teams got paged on. Watched the same pattern every time: AI tools arrive, talk big, then ask the on-call engineer to retrieve more context.
Today we announce what we built instead..
Another common question I’m answering working with scaling tech companies is…
Q. What’s the worst leadership advice you’ve heard?
A. By far the worst is “Hire great people and get out of their way��.
Let me explain… 🧵 (1/32)
Here is @elastic's first proposal to change the Linux kernel. It makes BTF easier to use for eBPF programs on more kernels. https://t.co/wY7ik9SoER. 👏to @fntlnz, @maurovasquezb (Microsoft) and @rafaeldtinoco (Aqua Security). What an honor to be git blamable in the kernel!
I'm part of a "repair café" where people bring their broken devices and we (try to) repair them and teach their owner. I brought some homework with this toaster whose heating resistor was cut. One hour of work and 5 cm of wire and it's back on track! Don't trash things, fix them!
Have a look at Harp, a Go library/tool to enable secret management in CI/CD pipelines, templating & standardisation, playing nicely with @HashiCorp Vault.
Developed by @zenithar of @elastic#ElasticCloud security team for internal use. It's now FOSS under Apache 2.0
Harp is named after Harpocrates (Ancient Greek: Ἁρποκράτης) the god of silence, secrets and confidentiality in the Hellenistic religion https://t.co/rsk82FTAiw.
Thanks to @hakmem for the name suggestion!