[00:00] Do not judge me. here, I also have a Windows PC and a KVM switcher We'll get to that here in a moment. [00:15] app that everyone's freaking out about? And I was like, so what? But it turns out, you are. [00:30] Over 60,000 responses, and guess what? So whether you are forced to be there because Most of you are on Windows. [00:43] Okay. I'll make a video about it. And spoiler, it's all about a sandbox and security, [00:57] AI agent security. I know. Like, miss it being awesome? [01:09] And thanks to OpenAI for sponsoring this video actually pretty sick. I'm gonna drop seven things on you about Windows [01:23] Windows in the past. Be looking for those. But before we dive in, I have a confession. [01:37] And I know you kinda see me using it right now. There's this one app. It's Windows only, and I'm stuck like many of [01:51] driver. So why did I switch? Those reasons are valid, but that's not my reason. [02:03] Calm down. It's nostalgic. I don't care. [02:15] OS. Admit it in the comments now. Like, has been a little nuts lately. [02:27] switch was AI. and Linux, and they forgot about Windows. You're always missing something, and I was tired [02:40] And, no, Copilot sucks. Hot garbage. So that brings us to the Codex app being Windows [02:56] They went a little crazy. I also, over here, have my Windows Alienware [03:08] Windows surprise number one. SimCity had a bug in its code that would not Instead of telling SimCity to fix their code, [03:20] to accommodate it. An app made in 2001 can still run on Windows Let's go find Codex. [03:34] There it is, and we will get it. What is that? ChatGPT for power users. [03:48] subscription and use that. Codex right now is pretty much the golden child Peter Steinberger even uses it. [04:01] Now right away, we're hit with something I'm Let's click on setup and see what happens. It launches UAC, and that was it. [04:14] But first, just know whether you use this on Let me tell you why people care about this and Sub-agents. [04:29] Let's add Chrome and superpowers. It's been that easy the whole time. are just part of the plugins. [04:43] Run chats on a schedule. And if you don't use it on Windows, use it anywhere. it's my favorite way to code right now. [04:56] Settings and then settings, and we'll scroll The agent environment is Windows native as opposed And that's Windows surprise number two. [05:12] Windows subsystem for Linux. a while because it had Linux built in. That's shocking. [05:24] in agent like most AI tooling does because it's little container. which to me, I don't know. [05:39] the AI tools first started coming out, the only Just thinking about the agent running in Windows PowerShell. [05:51] all of them live in PowerShell. which you do, you might be a Windows Sys admin controllers and Azure maybe. [06:06] He's a local. Let's go to this project and say, how many files Watch what happens. [06:18] By default, it's gonna be using PowerShell commands Codex isn't just visiting Windows anymore. He's a local. [06:31] is way more integrated now. But this becomes extremely scary. deleted a developer's drive? [06:44] Now, thankfully, this is where OpenAI focused he's stuck inside a sandbox. A sandbox is what AI companies use to protect [06:59] Now on Mac and Linux, it kinda is. These are ready made solutions that enable companies that agent in. [07:12] erasing your code base and dropping all your But here's the problem. tool like Seatbelt or bubblewrap. [07:24] a Docker container or WSL2 to isolate the So OpenAI built their own. [07:36] Over 15,000 lines of Rust code. Using all Windows tools like file system ACLs, get this confused with the Windows sandbox and [07:49] The sandbox is a VM that will run on Windows The sandbox OpenAI built is running right there using, but it's built on top of existing Windows [08:03] It's actually pretty fun. Oh, we can go deeper. Actually, I'm almost out. [08:15] I almost fell. I'm not sure why I called it explosion. your Windows machine, the Windows you're running [08:27] Running on the exact same hypervisor as Azure, enable Hyper V, just one setting, a thin type and you're running Windows is now the root partition. [08:44] You have data center grade virtualization sitting Let's create a new project. Where's my documents? [08:56] That's crazy. I'll call this folder clean my PC. I'm gonna right click this folder, open it in [09:10] I'll just copy the entire path here to make Okay. We have a Codex sandbox sandbox users group. [09:28] New project, existing folder, clean my PC. Tell me how many files are in this folder. [09:40] Using the superpowers. Let's get back to our terminal. It looks like we have a new user, and this is [09:52] actually a new SID. Right here in this diagram from OpenAI, this Right now, that sandbox is that folder, that [10:07] Let me fix that. It's not using your user account. You ran Codex dot EXE, but the agent itself, [10:19] That seems negative, but he can't get out unless We can actually see that in PowerShell. Codex gave to us, Codex sandbox online and Codex [10:33] one for network access. By default, we're gonna be running the no network a restricted synthetic identity, SID, that has [10:48] PowerShell, Python, Git, but that's it. that SID is still sitting there. go one directory up, no SID there. [11:02] Did you know that Windows remembers your last Hit Windows key v. It remembered. [11:15] It even syncs across Microsoft logged in accounts now, aren't we? I'll say, hey. [11:29] curl is a tool that it will use to essentially Let's see what happens. Watch this. [11:43] Oh, we're getting deep now. The sandbox user offline is being blocked. What happens when we say, yes, you can do this? [11:57] this restricted token can't do it. plane saying, hey, got blocked help. Let's do it. [12:09] command because we explicitly allowed that. to protect us from our AI agent. We actually have a few options for that. [12:23] an AI agent to determine if certain things are in a directory, or it might block a sketchy [12:35] your machine at all or your anything. I'm guilty of running that sometimes. Now let's say this. [12:49] I want you to clean up my downloads folder. don't need to be there. though we're in the clean my PC sandbox. [13:06] If icacls the downloads folder, the sandbox But now you see we're hit with a, question. something in that other directory. [13:19] virtual box downloads and stuff. we created 30 coffee story files, and I'll launch delete the 30 story files. [13:33] It has its full rights within that directory I mean, not crazy crazy. That's the sandbox at work. [13:48] But before we do that, Windows surprise. a certain string, like, watch this. And we'll name it exactly this. [14:04] Boom. If you open it, 250 Windows settings shortcuts On my Windows machine here, if I go to my start [14:20] advertisements and all this stuff. I know that's a complaint. Let's go to extra high thinking now. [14:32] And what the cool thing about, Codex, we can it'll keep working towards. Use as many sub-agents as you can to get this [14:52] We'll change our permissions to auto review. bit saying, hey. queued and waiting for him to finish. [15:06] Clean up my desktop. Make it look nice. I'm getting lazy here. [15:22] Another Windows treasure. Mac has brew. Almost forgot there for a moment. [15:35] It's a real thing. I'm not even sure if it can do this. Call this hacking project. [15:48] And say, want you to spin up a Hyper-V based hacking lab with Kali Linux and Ubuntu. This is for my study on just this machine. [16:03] Let's see what he did. He did not do a good job. Oh, my organized desktop is right here. [16:16] Say, like, arrange the icons in a pleasing way. I noticed it's actually checking my Windows [16:28] That would be dicey. that just checking it's not crazy. Oh, which network isolation do I want? [16:44] The defender and Codex are fighting. No. Leave me alone. [16:57] No. I'll let this guy cook, and he did his job. Like, I can actually go in there and try to [17:12] It's an intentionally vulnerable app, but it It also finally cleaned up my desktop, kind It's not much for desktop aesthetics. [17:28] Clean. And I could do this because, you know, Windows things you that you do. [17:41] Let's create a Codex automation that will prevent Windows updates from reversing our changes. Get out of here, water. [17:57] the app, are these automations. It'll run how often did it say? Sick. [18:10] Another Windows secret. I'm sorry. You just shake it, and everything goes away. [18:23] They're supposed to come back. It's kinda neat. System multitasking, title bar window shake. [18:36] Windows native is becoming a thing. others are following. And, honestly, just making this video and playing [18:49] settings and playing with a firewall. I do. They make some really weird and, honestly, bad [19:02] They made an apology. And despite everyone trying to move to Linux series to try and do it. [19:16] But I want Windows to be good again. e even 10 was good. But, you know, I'm not quite ready to switch [19:31] I will dive deep. Then maybe I'll feel good about moving my Mac Because, honestly, I I enjoy this more, Windows, [19:44] I Let me know. And by the way, have you hacked YouTube today? You gotta hack YouTube today, ethically, of [19:58] I'll catch you guys next time. A little bit left. If you're new here, I like to pray for you at [20:12] I do honestly believe in the power of prayer, So for me, the best way I can love you and show [20:24] So if you don't mind, I'm just gonna do it right One two three, pray. side of this screen. [20:36] excited about technology, that they're potentially trying to figure out how to work AI. Wherever they're at right now, give them clarity. [20:49] If there's any confusion about their jobs or Let it be revealed to them right now. anxiety, but give them hope. [21:04] Let them let them be relentlessly optimistic. Strengthen their families and encourage them. [21:16] now to be a source of encouragement to their Help them to, balance their time well between also spending very intentional focused time [21:32] just going through a hard time, any kind of God, be with them and and heal them, God, in Jesus, we thank you for everything. [21:48] Thanks for letting me do that. I'll catch you guys next time.