Sandfort

A clean machine for untrusted work

3 followers

A clean machine for untrusted work

3 followers

Visit website

Automation tools

Sandfort is a native macOS app that creates disposable Ubuntu, Fedora, Debian, and openSUSE VMs in UTM, so untrusted code never runs on your real machine.

Free

Launch tags:Linux•Mac•Open Source

Launch Team

Dropbox SignSimple, secure eSignatures for the way your team works.

Promoted

Be the first to comment

Forum Threads

p/sandfort

•

3mo ago

Hello!

Some code should never touch your real machine.

A recruiter sends a coding challenge. A tutorial says to pipe a script into your shell. A dependency you have never heard of wants a post-install hook.

Each of those runs with your files, your SSH keys, your browser profile, and your password manager sitting right there. Attackers know it Elastic Security Labs documented a campaign that delivered malware through fake interview challenges, which is part of what prompted this project.

Sandfort's answer is boring on purpose: give that work a whole separate computer, make the separate computer cheap to create, and make throwing it away the normal thing to do rather than a chore.

View all