ashishb

It is good but you still don't want long running background tasks.

When you run a linter, for example, then it should stop executing cider once it stops. And not be able to spawn long-running background tasks for infiltration.

Don't mount all your code every time.

E.g. when working on a frontend only project, you don't need to mount the backend directory and vice-versa. This limits the attack radius.

The extensions does not need full access to the laptop.

When you are invited to someone's living room, you don't get to access their bedroom.

The idea that Claude should have full data access to the home directory is wrong. And as an industry leader, Claude has set a bad precedence.

Yeah, dev containers indeed has better integrations.

It is fairly useless if you want to run a random tool like a linter on a random file(s)