vin10
Joined 3 years ago
Karma
337
Submissions
23
Member since
Sep 11
https://vin01.github.io/piptagole/
View on Hacker NewsRecent submissions
Comment · 5 months ago
There should be a metric for sites hosting malicious content!
https[:]//erasmus-plus.ec.europa.eu/sites/default/files/2026-05/mortal-kombat-2-cs.pdf
Comment · 10 months ago
it's a (then-)safe default from the age when having 1GB of RAM and 2GB of swap was the norm: https://linux-kernel.vger.kernel.narkive.com/U64kKQbW/should...
Comment · 10 months ago
> he way stuff fails when it runs out of memory is really confusing
have you checked what your `vm.overcommit_ratio` is? If its < 100%, then you will get OOM kills even if plenty of RAM is free since the default is 50 i.e. 50% of RAM can be COMMITTED and no more.
curious what kind of failures you are alluding to.
Comment · 10 months ago
For anyone feeling brave enough to disable overcommit after reading this, be mindful that default `vm.overcommit_ratio` is 50% which means that if no swap is available, on a system with 2GB of total RAM, more than 1GB of RAM can't be allocated and requests will fail with preemptive OOMs. (e.g. postgresql servers typically disable overcommit)
- https://github.com/torvalds/linux/blob/master/mm/util.c#L753
Comment · 1 year ago
Nice usability features definitely. Apart from that how would you say it compares against something like sysdig falco / cilium + tetragon?
Apart from this a major issue is DNS based dynamic filtering which is way batter to get right in a Kubernetes environment with something like Cilium. IP lists are impossible to manage with modern level of third party integrations.
Comment · 1 year ago
Interesting project, I think I just found a way to crash the sandbox, just reported via an advisory.
Comment · 1 year ago
I would have expected at least Virustotal to flag them if that were the case. It does more than just looking up in a database of known malicious URLs and I think the reputation of the domains is the key factor here.
https://www.virustotal.com/gui/url/6dd23e90ee436e1ff066725aa...
> BitDefender - government
> Sophos - government
> Forcepoint ThreatSeeker - government
Comment · 1 year ago
It is the same for nested links as well. They mostly have a chain of links, each one taking you to a new one with hop count ranging anywhere from 5 up to 10 or more.
Comment · 2 years ago
> If you wouldn't trust running it on your host, you probably shouldn't run it in a container as well.
- From a Docker/Moby Maintainer
Comment · 2 years ago
It is guarded by a warning and requires explicit approval similar to browsers but yes, it does broaden the attack surface: https://gitlab.com/gnachman/iterm2/-/commit/fc9ae5c90f53cb1e...
Comment · 2 years ago
It is the first one, they need to be printed and clicked.