new23d
Joined 7 years ago
Karma
136
Submissions
94
Member since
Jun 20
Making network egress filtering effective, reliable and usable. Founder & Chief Engineer at https://chasersystems.com/
View on Hacker NewsRecent submissions
Comment · 19 days ago
They should publish the precise weight of these things.
Comment · 1 month ago
If the workload's network interface (ENI in AWS) is in a VPC that you manage, an outbound traffic filtering solution can prevent that. See AWS Network Firewall or the product we develop, DiscrimiNAT (https://chasersystems.com/), for example.
Rules can be per Security Group, too, for fine-grained access control. I would also strongly recommend that installation of dependencies is a build-time task, not a run-time task, and if those two stages are separated, it makes egress filtering a whole lot more effective since the build-time allowlists are often multi-tenant CDNs where a threat actor can host their own data capturing or malicious payload delivering service.
Comment · 2 months ago
Three variations on subversive use of DNS by the Agent are documented in Hugging Face's technical writeup of the July 2026 security incident involving OpenAI models. In this article, I discuss what each of these three types of DNS workarounds achieve in practice, the constraints an actor might have faced to attempt a particular one, and additional benefits from choosing each.
Comment · 3 months ago
Says Not Before: Thu, 09 Jul 2026 01:02:21 GMT ; Not After: Wed, 07 Oct 2026 01:02:20 GMT for me. Works fine, too.
Comment · 9 months ago
netim.com has been reliable over the years for me
Comment · 1 year ago
Our report seeks to answer some of our questions for seven of the most popular agentic code editors and plugins. By intercepting and analysing their network flows across a set of standardised tasks, we aim to gain insight into the behaviour, privacy implications, and telemetry patterns of these tools in real-world scenarios. Incidentally, a side-effect was running into OWASP LLM07:2025 System Prompt Leakage for three of the chosen coding agents. You can see the system prompts in the appendix.
Comment · 1 year ago
Obfuscation via egress firewalls and evasive binary development with an iterative LLM agent.
Comment · 1 year ago
Use AWS Route53?
Comment · 1 year ago
Making a dynamic DNS client with aws and jq CLI, with a least-privilege IAM role and a SystemD service.