Live data from Hacker News

Viewing profile — logicx24

logicx24

HN member
Joined
Wed, Feb 18, 2015, 7:16 AM UTC
HN karma
751
Public activity
91 items

About logicx24

No profile information was provided.

Recent public activity

  1. story
  2. story
  3. story
  4. story
  5. story
  6. story
  7. story
    Show HN: Drawbridge – Drop-In SSRF Protection for Python

    Drawbridge is a drop-in replacement for `requests` or `httpx` that provides comprehensive SSRF protection. For every request, it will: 1. Resolve DNS first with single getaddrinfo(…

  8. story
  9. comment
    Comment #47186363

    Yup. I just wrote about this last week: https://tachyon.so/blog/sandboxes-wont-save-you Of all the problems in agent security, sandboxing solves the easiest problem.

  10. comment
    Comment #47156634

    What I meant to say was, the agents (like Claude Code) often have a "Allow all instances of this command in the session," and that persists to a whitelist for that session. The mec…

  11. comment
    Comment #47156224

    But if I don't connect it to stuff, then what is it useful for?

  12. comment
    Comment #47156200

    One insidious thing is whitelists. If you allow the bot to run a command like `API_KEY=fdafsafa docker run ...`, then the API_KEY will be written to a file, and the agent can then …

  13. comment
    Comment #47156176

    Yeah, agreed. This is probably what that middleware would look like. That's also where you'd add the human approval flow.

  14. comment
    Comment #47156075

    True. But it can help me create a lot of useful text so I can represent my self better. I do wonder what happens when everyone is using agents for this, though. If AI produces the …

  15. story
  16. comment
    Comment #47039004

    Disclosure - I run https://tachyon.so/ , an AI SAST tool. It makes sense that SAST is better for the provided task. The CWE Top 25 seem like issues focused around patterns. Each on…

  17. comment
    Comment #47010578

    If Donald Trump did this, he wouldn't be criminally liable either.

  18. comment
    Comment #47009212

    Regular people would not be held liable for this. It would be a dubious case even if a human helped another human to do this.

  19. comment
    Comment #46951437

    How will we handle cooling in space?

  20. comment
    Comment #46907359

    > the ongoing economic and cultural exchange would have propelled the island towards a different political system The blocker to this has always been the government refusing to ref…

  21. comment
    Comment #46906537

    I can't even get through my Claude Max quota, and that's only 200/mo. And I code every day and use it for various other pretty-intensive tasks.

  22. comment
    Comment #46893186

    Where's the code for this? I'd love to run our tool, https://tachyon.so/ , against it.

  23. story
  24. comment
    Comment #46650812

    Robert Caro, in the LBJ series, wrote about how LBJ would use the discomfort of being the bathroom as a negotiating technique and a show of dominance. He would drag senators into t…

  25. story