Cats, flowers and bubble wrap; does it get any better? #CaturdayEveryday #Caturday #CatsOfMastodon #BubbleWrap

Sometimes devil is in the details. #POSIX requires option parsing to terminate when the initial non-option argument is encountered. This is different than the #GNU style which continues parsing arguments until an explicit "--" is encountered. The latter has been susceptible to command line injection attacks. One recent example is in #bubblewrap & #flatpak combo with CVE-2024-32462. Otoh, #sydbox and all its utilities use posixly correct option parsing: https://nvd.nist.gov/vuln/detail/cve-2024-32462 #linux #security

Good to know.

#Bubblewrap creates isolated environments using #Linux kernel namespaces. It achieves this by creating a new, completely empty mount namespace where the root is mounted on a tmpfs. When installed, Bubblewrap provides a bwrap CLI tool that can be used to wrap any command (with caveats). Of special interest are coding agents like #OpenCode, Claude Code etc.

https://patrickmccanna.net/a-better-way-to-limit-claude-code-and-other-coding-agents-access-to-secrets

Bubblewrap: A nimble way to prevent agents from accessing your .env files

https://patrickmccanna.net/a-better-way-to-limit-claude-code-and-other-coding-agents-access-to-secrets/

#HackerNews #Bubblewrap #nimble #prevent #agents #env #files #coding #secrets #security

Dự án 'Popcalypse' ra mắt game bóp bong bóng chống sốc trực tuyến, đa người chơi. Mỗi bong bóng được đồng bộ: bóp một cái, nó biến mất với tất cả. Hết là hết mãi mãi! Có cả tấm riêng cho bạn.
#Popcalypse #Game #BubbleWrap #SideProject #TròChơi #BongBóng

https://www.reddit.com/r/SideProject/comments/1q0io6j/a_million_bubble_countdown_to_the_popcalypse/

what i want to eventually see is a GUI program similar to #bottles, but for managing (#flatpak / #bubblewrap) -based sandboxes on #linux

let's say i have some proprietary program or game i don't entirely trust, or that depends on libraries not supplied in my distro

i want to be able to create a sort of container for it, pick one of the Freedesktop runtimes as the basis (maybe with some extras, like the GNOME or KDE libraries added), set which directories and interfaces the programs inside the container have access to, then just be able to copy files and run executables inside it

CI/CD Week Day 2! Security is key! Running directly on the host (bareMetal) is fast, but system admins need control over what processes run.

Enter Executor 2: bwrap (bubblewrap). This creates a very light container/sandbox, similar to what Flatpak uses!

You get the same execution capability (e.g., running `echo "hello" > README.md`), but in a confined, isolated way. It's the best of both worlds: speed and security!

Ready for the executor that lets you run any process? Follow me for tomorrow's reveal! 🐳

#CICD #DevOps #Bubblewrap #Security #Containers

💥 Bubble wrap bursts enable power-free acoustic testing

https://techxplore.com/news/2025-10-enable-power-free-acoustic.html

#sensors #acoustics #pop #bubblewrap #testing #sound

🍾🤡 #Bubblewrap, the high-tech innovation to #NetBSD, because who needs robust security when you can just pop your way to safety? 🎈✨ Welcome to the future of sandboxing: as strong as the packaging your last Amazon delivery came in. 🚀🛍️
https://blog.netbsd.org/tnf/entry/gsoc2025_bubblewrap_sandboxing #TechInnovation #Sandboxing #SecurityFail #FutureOfTech #HackerNews #ngated

Using bubblewrap to add sandboxing to NetBSD

https://blog.netbsd.org/tnf/entry/gsoc2025_bubblewrap_sandboxing

#HackerNews #bubblewrap #NetBSD #sandboxing #GSoC2025 #security #technology

@Imperor flatpak uses bubblewrap for sandboxing, unless I am mistaken, then flatseal configures those bubblewrap permissions. So, you could start your programs with it too. Another way would be AppArmor. Or, if you want something to keep your base system clean (this does not bring any security advantages) you could use distrobox.

#linux #sandboxing #security #bubblewrap #apparmor #gnulinux #flatpak

I spent two hours yesterday debugging why my program which uses #bubblewrap and #overlayfs suddenly stopped working yesterday. Turns out, it was a kernel update and just needed a reboot...!

A worthwhile project to harden your #NixOS even more by sandboxing applications via #bubblewrap: jail.nix.

(I was using NixPak before which is also nice, but I find jail.nix to be of a nicer design, more flexible and minimalist at the same time).

It is somewhat minimal and strict at the moment (for instance, It doesn't yet automatically forward the '*.desktop' files from the jailed apps), but perhaps that's one of the reasons I like it: it's fairly clear where things come from.

Bello Bear Bit 15 Bubble Wall Paper - Watch & Follow on YouTube https://youtube.com/shorts/l5D46a9ELl4?feature=share

#bubblewrap #webcomic #sarcasticplant #ocdproblems #fyp

Bello Bear Bit 15 Bubble Wall Paper - Watch & Follow on YouTube https://youtube.com/shorts/l5D46a9ELl4?feature=share

#bubblewrap #webcomic #sarcasticplant #ocdproblems #fyp

Packing for coming FuelNoises shows! (part 1)
when u would need flight cases but you prefer to pay ppl decently instead of buying stuff...
#box #gaffa #bubblewrap #fluffy #bricolage

Why Avoid Binaries in Early-Stage Projects?

Auditability: Source code is readable, understandable, and can be version-controlled. Binaries (especially opaque ones) may include unknown payloads, telemetry, or hardcoded calls. #bubblewrap #firejail

Noch einer für die #Fedieltern

Das #Planschbecken heizt sich innerhalb 1-2 Stunde in der Sonne auf mit der Hilfe von etwas #bubblewrap 👍🏼

#abkühlung #Wasserspaß #elterntipps