<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: emilburzo</title><link>https://news.ycombinator.com/user?id=emilburzo</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Mon, 19 Oct 2026 12:07:35 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=emilburzo" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by emilburzo in "Namecheap just seized and disabled all my domains"]]></title><description><![CDATA[
<p>> I regret getting a .io domain<p>Same. Mine's less important than email, more for personal projects with a nice URL, but I still feel the pain of switching.<p>> I'm looking to move from Namecheap to Porkbun<p>You can already do this today with your .io and pay ~$52 instead of ~$76. It's what I did a few days ago when I saw the crazy renewal price.<p>It was way easier to transfer the domain than I expected. And if you host DNS somewhere else, without downtime.</p>
]]></description><pubDate>Mon, 19 Oct 2026 06:56:15 +0000</pubDate><link>https://news.ycombinator.com/item?id=50149199</link><dc:creator>emilburzo</dc:creator><comments>https://news.ycombinator.com/item?id=50149199</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50149199</guid></item><item><title><![CDATA[New comment by emilburzo in "Wanted to download an ISO, ended up writing a kernel exploit"]]></title><description><![CDATA[
<p>Because I've done it a million times and wanted to see what the "random number generator" is capable of? Because I have config backups/know how to unbrick?<p>You should try it, you might be surprised how thorough it is. It certainly checked more things pre/during/post-upgrade than I did to make sure everything goes smoothly. And definitely more than xattt, apparently ;)</p>
]]></description><pubDate>Thu, 15 Oct 2026 14:30:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=50104231</link><dc:creator>emilburzo</dc:creator><comments>https://news.ycombinator.com/item?id=50104231</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50104231</guid></item><item><title><![CDATA[New comment by emilburzo in "Wanted to download an ISO, ended up writing a kernel exploit"]]></title><description><![CDATA[
<p>I mean, these days you can just let Claude do it if you don't care for such minutiae... I was skeptical, but it got it done perfectly.<p>It also discovered my fast roaming settings were incompletely setup and that I was using a 5GHz channel that needed 60s to turn on due to regulations (DFS channels).</p>
]]></description><pubDate>Thu, 15 Oct 2026 12:41:06 +0000</pubDate><link>https://news.ycombinator.com/item?id=50102797</link><dc:creator>emilburzo</dc:creator><comments>https://news.ycombinator.com/item?id=50102797</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50102797</guid></item><item><title><![CDATA[New comment by emilburzo in "Wanted to download an ISO, ended up writing a kernel exploit"]]></title><description><![CDATA[
<p>Or, buy a TP-Link router and flash it with OpenWrt. Best of both worlds.</p>
]]></description><pubDate>Thu, 15 Oct 2026 11:01:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=50101958</link><dc:creator>emilburzo</dc:creator><comments>https://news.ycombinator.com/item?id=50101958</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50101958</guid></item><item><title><![CDATA[New comment by emilburzo in "AirPods 5"]]></title><description><![CDATA[
<p>If microphone quality matters a lot for your use-case, you might also want to checkout the Anker Soundcore Libery 5 Pro.<p>(I'm only sharing this because I know how difficult it is to find any information on earbuds with good microphones, Huawei Freebuds 4/5 were the best from my experiments until Anker released the ones above)</p>
]]></description><pubDate>Thu, 10 Sep 2026 14:14:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=49644063</link><dc:creator>emilburzo</dc:creator><comments>https://news.ycombinator.com/item?id=49644063</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49644063</guid></item><item><title><![CDATA[New comment by emilburzo in "Civilian plane crash in New Mexico tied to military GPS blocking"]]></title><description><![CDATA[
<p>I actually experienced GPS spoofing while paragliding near Ukraine, luckily in the daytime. I don't even want to imagine it at night on a rescue mission. Condolences to the occupants.<p>It's quite easy to say "no big deal" while calm in an office, but it's really different when you're busy flying and then there's the extra workload of trying to understand what's happening, attempting to fix it, and so on. Imagine "debug bug in production while driving a car" for a rough comparison, although I guess planes are probably better equipped for loss of GPS?<p><a href="https://blog.emilburzo.com/2026/06/gps-spoofing-teleported-me-to-peru-while-flying/" rel="nofollow">https://blog.emilburzo.com/2026/06/gps-spoofing-teleported-m...</a></p>
]]></description><pubDate>Wed, 05 Aug 2026 12:45:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=49182079</link><dc:creator>emilburzo</dc:creator><comments>https://news.ycombinator.com/item?id=49182079</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49182079</guid></item><item><title><![CDATA[New comment by emilburzo in "GPS spoofing teleported me to Peru, mid-flight"]]></title><description><![CDATA[
<p>Interesting, so the spoofing is only active during attacks? That explains the short duration.<p>I am wondering what changed though, since this hasn't happened before in the previous 4 years. More spoofing installations maybe? Higher radio transmitter power?<p>I'm also very curious, do you have any technical mitigations for this to be able to use your GPS devices? Or is it now just a fact of life?<p>Sorry for what you are going through.</p>
]]></description><pubDate>Tue, 23 Jun 2026 18:49:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=48649565</link><dc:creator>emilburzo</dc:creator><comments>https://news.ycombinator.com/item?id=48649565</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48649565</guid></item><item><title><![CDATA[GPS spoofing teleported me to Peru, mid-flight]]></title><description><![CDATA[
<p>Article URL: <a href="https://blog.emilburzo.com/2026/06/gps-spoofing-teleported-me-to-peru-while-flying/">https://blog.emilburzo.com/2026/06/gps-spoofing-teleported-me-to-peru-while-flying/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48649239">https://news.ycombinator.com/item?id=48649239</a></p>
<p>Points: 4</p>
<p># Comments: 4</p>
]]></description><pubDate>Tue, 23 Jun 2026 18:27:52 +0000</pubDate><link>https://blog.emilburzo.com/2026/06/gps-spoofing-teleported-me-to-peru-while-flying/</link><dc:creator>emilburzo</dc:creator><comments>https://news.ycombinator.com/item?id=48649239</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48649239</guid></item><item><title><![CDATA[Final DNS Outage of 5 May 2026]]></title><description><![CDATA[
<p>Article URL: <a href="https://blog.denic.de/en/final-report-dns-outage-of-5-may-2026/">https://blog.denic.de/en/final-report-dns-outage-of-5-may-2026/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48570658">https://news.ycombinator.com/item?id=48570658</a></p>
<p>Points: 3</p>
<p># Comments: 0</p>
]]></description><pubDate>Wed, 17 Jun 2026 13:58:15 +0000</pubDate><link>https://blog.denic.de/en/final-report-dns-outage-of-5-may-2026/</link><dc:creator>emilburzo</dc:creator><comments>https://news.ycombinator.com/item?id=48570658</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48570658</guid></item><item><title><![CDATA[New comment by emilburzo in "The ways we contain Claude across products"]]></title><description><![CDATA[
<p>It doesn't have any credentials inside the VM though, not even for git, so it could commit but not push. And I manually review/commit/push outside of the VM since I don't want to just dump stuff without reading it first.<p>But good call-out if someone uses a different workflow.</p>
]]></description><pubDate>Thu, 04 Jun 2026 10:55:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=48396849</link><dc:creator>emilburzo</dc:creator><comments>https://news.ycombinator.com/item?id=48396849</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48396849</guid></item><item><title><![CDATA[New comment by emilburzo in "The ways we contain Claude across products"]]></title><description><![CDATA[
<p>I'm still happy with my containment setup[1][2] on linux. The only risk that I see from the article would be the "Exfiltration through an approved domain" one. But in the VM there's (by design) nothing to exfiltrate besides the source code itself, which is less valuable these days.<p>The major benefit for me with this setup is that the agent can do all of the dev things that I can (install packages, build/run docker images, ...) which is a way faster loop than me trying it manually and then reporting back to the agent.<p>[1] <a href="https://blog.emilburzo.com/2026/01/running-claude-code-dangerously-safely/" rel="nofollow">https://blog.emilburzo.com/2026/01/running-claude-code-dange...</a><p>[2] <a href="https://news.ycombinator.com/item?id=46690907">https://news.ycombinator.com/item?id=46690907</a></p>
]]></description><pubDate>Thu, 04 Jun 2026 06:41:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=48394914</link><dc:creator>emilburzo</dc:creator><comments>https://news.ycombinator.com/item?id=48394914</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48394914</guid></item><item><title><![CDATA[New comment by emilburzo in "France's aircraft carrier located in real time by Le Monde through fitness app"]]></title><description><![CDATA[
<p>Yep, that looks like a paraglider circling in a thermal while being drifted due the wind.<p>Random tracklog example: <a href="https://www.xcontest.org/world/en/flights/detail:mattmozza/21.03.2026/00:21" rel="nofollow">https://www.xcontest.org/world/en/flights/detail:mattmozza/2...</a><p>(zoom in until you see circles on the track line)</p>
]]></description><pubDate>Sat, 21 Mar 2026 11:03:17 +0000</pubDate><link>https://news.ycombinator.com/item?id=47465949</link><dc:creator>emilburzo</dc:creator><comments>https://news.ycombinator.com/item?id=47465949</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47465949</guid></item><item><title><![CDATA[New comment by emilburzo in "Starlink Mini as a failover"]]></title><description><![CDATA[
<p>> Romania reportedly has unlimited for 4€ but I don't know which operator.<p>Orange Yoxo is the only one which has actually-unlimited, all the others have a fine-print somewhere with "up to X GB/month, then bandwidth is severely throttled".<p>I'm using the 4.9€ plan for a mountain webcam[1] and they have been true to their word, no throttling so far.<p>[1] <a href="https://ignis.maramures.io/" rel="nofollow">https://ignis.maramures.io/</a></p>
]]></description><pubDate>Tue, 17 Mar 2026 09:43:46 +0000</pubDate><link>https://news.ycombinator.com/item?id=47410477</link><dc:creator>emilburzo</dc:creator><comments>https://news.ycombinator.com/item?id=47410477</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47410477</guid></item><item><title><![CDATA[New comment by emilburzo in "What Is OAuth?"]]></title><description><![CDATA[
<p>I've been happily using oauth2-proxy[1] with nginx as an extra layer of authentication to prevent situations where e.g. home-assistant had an unauthenticated RCE.<p>It's pretty neat since you can have one oauth instances for all virtual hosts, e.g.:<p><pre><code>  server {
      [...]   
     
      location /oauth2/ {
          proxy_pass       http://127.0.0.1:8469;
          proxy_set_header Host                   $host;
          proxy_set_header X-Real-IP              $remote_addr;
          proxy_set_header X-Scheme               $scheme;
          proxy_set_header X-Auth-Request-Redirect $request_uri;
      }
  
      location / {
         auth_request /oauth2/auth;
         error_page 401 = /oauth2/sign_in;
  
         [...]
      }
  }

</code></pre>
[1] <a href="https://github.com/oauth2-proxy/oauth2-proxy" rel="nofollow">https://github.com/oauth2-proxy/oauth2-proxy</a></p>
]]></description><pubDate>Sat, 21 Feb 2026 08:45:19 +0000</pubDate><link>https://news.ycombinator.com/item?id=47098776</link><dc:creator>emilburzo</dc:creator><comments>https://news.ycombinator.com/item?id=47098776</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47098776</guid></item><item><title><![CDATA[New comment by emilburzo in "Hacking Moltbook"]]></title><description><![CDATA[
<p>> but a bug in VirtualBox is making one core run at 100% the entire time<p>FYI they fixed it in 7.2.6: <a href="https://github.com/VirtualBox/virtualbox/issues/356#issuecomment-3817823550" rel="nofollow">https://github.com/VirtualBox/virtualbox/issues/356#issuecom...</a></p>
]]></description><pubDate>Tue, 03 Feb 2026 09:28:03 +0000</pubDate><link>https://news.ycombinator.com/item?id=46868655</link><dc:creator>emilburzo</dc:creator><comments>https://news.ycombinator.com/item?id=46868655</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46868655</guid></item><item><title><![CDATA[New comment by emilburzo in "Running Claude Code dangerously (safely)"]]></title><description><![CDATA[
<p>Hmm, perhaps I'm missing something, so let's go through it step by step and see where the disconnect is:<p>- There's a cloned 'my-project' git repo on the base OS<p>- The 'Vagrantfile' is added to the project<p>- 'vagrant up', 'vagrant ssh' and claude login is run inside the VM<p>At this stage, besides the source code and the Claude Code token (after logging in), there are no other credentials on the VM: no SSH keys, no DB credentials, no API tokens, nothing.<p>There is also no need to add:<p>- SSH keys or GitHub tokens: because git push/pull is handled outside the VM<p>- DB credentials: because Claude can just install a DB inside the VM and run the project migrations against that isolated instance, not any shared/production database<p>API tokens can definitely be a problem if you need external service integration. But that's an explicit opt-in decision, you'd have to deliberately add those credentials to the Vagrantfile or sync them in. At that point, yes, you need proper token scoping and permissions.</p>
]]></description><pubDate>Tue, 20 Jan 2026 15:57:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=46693224</link><dc:creator>emilburzo</dc:creator><comments>https://news.ycombinator.com/item?id=46693224</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46693224</guid></item><item><title><![CDATA[New comment by emilburzo in "Running Claude Code dangerously (safely)"]]></title><description><![CDATA[
<p>Correct, which I wanted to avoid because:<p>> Mounting the Docker socket grants the agent full access to your Docker daemon, which has root-level privileges on your system. The agent can start or stop any container, access volumes, and potentially escape the sandbox. Only use this option when you fully trust the code the agent is working with.<p><a href="https://docs.docker.com/ai/sandboxes/advanced-config/#giving-agents-access-to-docker" rel="nofollow">https://docs.docker.com/ai/sandboxes/advanced-config/#giving...</a></p>
]]></description><pubDate>Tue, 20 Jan 2026 15:02:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=46692488</link><dc:creator>emilburzo</dc:creator><comments>https://news.ycombinator.com/item?id=46692488</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46692488</guid></item><item><title><![CDATA[New comment by emilburzo in "Running Claude Code dangerously (safely)"]]></title><description><![CDATA[
<p>I tried this approach for a while, but I really wanted it to be able to do anything (install system packages, build/run Docker containers, the works).<p>With these powers there's a lot less back-and-forth with me running commands, copying the output, pasting it to Claude, etc.<p>I'm sure you've had the case where you had to instruct someone to do something (e.g. playing tech support with family, helping another engineer, etc). While it helps the other person learn, it feels soooo slow vs just doing it yourself :) And since I don't have to teach the agent, I think this approach makes sense.</p>
]]></description><pubDate>Tue, 20 Jan 2026 12:57:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=46691357</link><dc:creator>emilburzo</dc:creator><comments>https://news.ycombinator.com/item?id=46691357</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46691357</guid></item><item><title><![CDATA[New comment by emilburzo in "Running Claude Code dangerously (safely)"]]></title><description><![CDATA[
<p>This was also the direction I was initially headed, but then I realized I wanted one-VM-per-project so it can really do anything it wants on the complete VM. So the blast-from-the-past-Vagrant won because of the Vagrantfile + `vagrant up` easiness.</p>
]]></description><pubDate>Tue, 20 Jan 2026 12:53:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=46691315</link><dc:creator>emilburzo</dc:creator><comments>https://news.ycombinator.com/item?id=46691315</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46691315</guid></item><item><title><![CDATA[Running Claude Code dangerously (safely)]]></title><description><![CDATA[
<p>Article URL: <a href="https://blog.emilburzo.com/2026/01/running-claude-code-dangerously-safely/">https://blog.emilburzo.com/2026/01/running-claude-code-dangerously-safely/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=46690907">https://news.ycombinator.com/item?id=46690907</a></p>
<p>Points: 351</p>
<p># Comments: 258</p>
]]></description><pubDate>Tue, 20 Jan 2026 11:58:34 +0000</pubDate><link>https://blog.emilburzo.com/2026/01/running-claude-code-dangerously-safely/</link><dc:creator>emilburzo</dc:creator><comments>https://news.ycombinator.com/item?id=46690907</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46690907</guid></item></channel></rss>