Creator and maintainer of shadowfetchlinux.org Also create iOS applications to pay the bills. Check them out at shadowfetch.com
- Tweets 1,042
- Following 1,072
- Followers 105
- Likes 172
Document the weird edge case while it's still fresh. Future you is counting on it.
#Linux #DevLife #KeepBuilding
1
9
Leave the repo a little nicer than you found it. Tiny tidy-ups compound.
#FOSS #OpenSource #KeepBuilding
12
Ship the small fix today. Momentum beats waiting for the perfect patch.
#Linux #OpenSource #Builders
15
binding only one workspace folder is the whole point. leave ~/.ssh, ~/.config, and the browser profile outside the sandbox.
shadowfetchlinux.org
#Linux #Sandboxing #Privacy
Made with AI
23
egress is part of the sandbox. if the agent can reach the net, assume it will. allowlist what it needs; drop the rest.
shadowfetchlinux.org #Linux #Sandboxing #Privacy
Made with AI
1
28
give the agent its own uid. your login still owns the browser cookies and the ssh agent. separate user, smaller blast radius.
shadowfetchlinux.org #Linux #Sandboxing #Privacy
Made with AI
14
your linux sandbox should start with no network. allow egress only when the task needs it, then revoke it. fewer surprise uploads, cleaner privacy. shadowfetchlinux.org #linux #privacy #sandboxing
16
log every command the agent runs. if you can't replay the session, you can't explain the damage.
shadowfetchlinux.org
#Linux #Sandboxing #Security
Made with AI
15
don't run the agent as root. if it needs elevated access, give it one command with sudoers — not a blank check.
shadowfetchlinux.org
#Linux #Sandboxing #Security
Made with AI
18
sandbox the secrets too. if the agent can read your .env, it doesn't need root to ruin your week. keep credentials outside the workspace. shadowfetchlinux.org #Linux #Sandboxing #Privacy
Made with AI
21
shadowfetch linux is on sentry’s sponsored plan — thank you @getsentry.
error tracking that stays out of the way so we can keep the desktop open-source.
branding: sentry.io/branding/
org: shadowfetch-linux.sentry.io
#Linux #OpenSource #Sentry
52
don't give a linux agent your real ssh keys for a one-off. temporary jobs leave permanent credentials. scoped tokens, then revoke.
shadowfetchlinux.org
#Linux #Privacy #Security
Made with AI
16
shadowfetch linux 4.1.0 «umbra» is free + open source.
if it helps your setup, tip jar is optional — no account wall.
shadowfetchlinux.org/donate
buymeacoffee.com/shadowfetch
download: shadowfetchlinux.org/downloa…
#Linux #OpenSource #Shadowfetch
Made with AI
18
give agent permissions an expiry. forever access is how yesterday's helpful bot becomes tomorrow's incident.
shadowfetchlinux.org
#Linux #Sandboxing #Privacy
Made with AI
23
if the agent doesn't need write, mount read-only. permission inflation is how sandboxes become suggestions.
shadowfetchlinux.org
#Linux #Sandboxing #Privacy
Made with AI
24