What options do we have for sandboxing windows? (short of docker, VMs, cloud machines)
Things I found
- lua/javascript
- sandboxie plus
- disabling python modules from their normal import location (this is 90% security theater, only works in a few use cases, maybe LLMs and definitely unit tests)
- run-in-a-Process, not-in-thread (this isn't 1980, memory corruption isn't the first problem)
- actual sand or kitty litter. No one is touching that computer sitting in the kitty litter box.