Developer turns son's PC into a GitHub runner, then realizes the security risk
tristanbob · x · 2026-10-20
A developer shares his experience setting up his son's computer as a GitHub self-hosted runner for his agents — and the security doubts that followed.
- To isolate the runner from anything running on it, he installed VirtualBox with a gateway VM between the runner and the Windows host
- He then realized a new risk: if his son's computer gets hacked, it has access to his production pipeline
- He concludes it may not have been a good idea after all, highlighting the blurred security boundaries of running CI/agent workloads on home devices
More from coding & agent
- ttmi makes your AI agent draw diagrams instead of dumping walls of text — blixt · 2026-10-20
- Claude Code plugin maps Claude's C compiler: 351 Rust files, 13 findings in 21 minutes — gantamk · 2026-10-20
- Enterprise AI Doesn't Fail in the Demo. It Fails in the Mess. — DavidLinthicum · 2026-10-20
- tsrs: Rust TypeScript Compiler Port Backed by TS Team Claims 8x Speed, 70% Less Memory — cnakazawa · 2026-10-20
- Bots that should be skills: auditing a Grok Bot fleet with six tests — bfrench · 2026-10-20
- Dev's code review setup: agent diagrams before/after flows on a canvas for Q&A — max__drake · 2026-10-20