99 comments: https://news.ycombinator.com/item?id=47597119

I feel like somebody is watching my Claude sessions :)

—-

2. we want to use docker for this not qemu if possible.. we should still be able to connect and debug it the same i assume 3. why does it need to be QEMU and not docker for this to be a real exploit? 4. no just use QEMU then