Hacker News: kjok

Container Speed. VM-Level Security

kjok — Thu, 04 Jun 2026 03:22:35 +0000

Comments URL: https://news.ycombinator.com/item?id=48393335

Points: 8

# Comments: 2

New comment by kjok in "CAPTCHAs can still detect AI agents"

kjok — Fri, 29 May 2026 20:11:57 +0000

I should have been clearer and specific: state management is done on the backend, but collecting behavioral biometrics and device fingerprint is done using JavaScript, which can be manipulated.

New comment by kjok in "CAPTCHAs can still detect AI agents"

kjok — Fri, 29 May 2026 18:05:19 +0000

Adversaries do not have to wait for LLM models to evolve to mimic human process, they can simply evade the detection JavaScript that evaluates similarity. JavaScript is visible, can easily be reverse-engineered.

New comment by kjok in "Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised"

kjok — Tue, 19 May 2026 16:58:28 +0000

Please also collect responses from people, you'd find a pattern: a new attack is launched, people make noise, and later go back to installing packages the same way. Enterprises already use private registries to combat such attacks, vulnerable folks include individual devs and small teams.

New comment by kjok in "Postmortem: TanStack NPM supply-chain compromise"

kjok — Tue, 12 May 2026 15:52:42 +0000

> Compare this to Android where you can run malware and it cannot do anything except for annoying you with notifications.

Are you sure it cannot do anything? Looking through various past malware/exploits, this doesn't seem to be the case.

One Agent Sandbox Is Not Enough

kjok — Sun, 10 May 2026 18:59:44 +0000

Article URL: https://multikernel.io/2026/03/25/sandlock-mcp-per-tool-sandboxing/

Comments URL: https://news.ycombinator.com/item?id=48086744

Points: 3

# Comments: 0

New comment by kjok in "Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystem"

kjok — Thu, 07 May 2026 18:04:34 +0000

Why should they be open source?

New comment by kjok in "Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign"

kjok — Thu, 23 Apr 2026 22:07:09 +0000

Cooldown sounds like a good idea ONLY IF these so called security companies can catch these malicious dependencies during the cooldown period. Are they doing this bit or individual researchers find a malware and these companies make headlines?

New comment by kjok in "I am building a cloud"

kjok — Thu, 23 Apr 2026 05:48:49 +0000

How difficult is it to build a second startup on the side?

New comment by kjok in "Ask HN: Can anyone suggest me a SaaS product idea?"

kjok — Wed, 15 Apr 2026 06:55:11 +0000

Are you a bot?

New comment by kjok in "Ask HN: What are you building that's not AI related?"

kjok — Fri, 10 Apr 2026 03:50:52 +0000

Building automated analysis tool that help identify the use of GPL-licensed SDKs in mobile apps, promoting license compliance and supporting sustainable open-source development.

Ask HN: Founders/investors, what AI bet you made in 2022 and how it is going?

kjok — Wed, 08 Apr 2026 18:06:18 +0000

In 2022, many founders and investors made strong bets on AI: new companies, pivots, or funding theses. Now that we have had time to see what actually played out, what did you bet on and how is it doing today? We learn a lot from failure, so especially interested in (and would appreciate) honest stories about what did NOT work and why.

Comments URL: https://news.ycombinator.com/item?id=47693990

Points: 6

# Comments: 1

New comment by kjok in "LLM scraper bots are overloading acme.com's HTTPS server"

kjok — Wed, 08 Apr 2026 06:53:40 +0000

How do you know that they were LLM scrapers? The reason I ask is because user agents could easily be spoofed?

New comment by kjok in "LLM scraper bots are overloading acme.com's HTTPS server"

kjok — Wed, 08 Apr 2026 06:24:18 +0000

For those who have deployed Cloudflare in front, what are pros and cons? How's the user experience? Do they offer free bot protection?

New comment by kjok in "LLM scraper bots are overloading acme.com's HTTPS server"

kjok — Wed, 08 Apr 2026 06:19:45 +0000

How are you measuring this? Does your solution rely on user agent or device fingerprinting? Curious to know what tools are available today and how accurate they are.

New comment by kjok in "Launch HN: Freestyle – Sandboxes for Coding Agents"

kjok — Mon, 06 Apr 2026 21:54:41 +0000

Thanks for sharing your approach!

> It is nothing special. We keep X number of machines in a warm pool.

I'd love to better understand the unit economics here. Specifically, whether cost is a meaningful factor.

The reason I ask is that many startups we've seen focus heavily on optimizing their technology to reduce cold/boot startup times. As you pointed out, perceived latency can also be improved by maintaining a warm pool of VMs.

Given that, I'm trying to determine whether it's more effective to invest in deeper technical optimizations, or to address the cold start problem by keeping a warm pool.

New comment by kjok in "Show HN: Zerobox – Sandbox any command with file, network, credential controls"

kjok — Wed, 01 Apr 2026 18:59:44 +0000

> The problem is that those underlying frameworks can very easily be misconfigured.

Agreed. I'm sure a number of these sandboxing solutions are vibe-coded, which makes your concerns regarding misconfigurations even more relevant.

New comment by kjok in "Show HN: Zerobox – Sandbox any command with file, network, credential controls"

kjok — Wed, 01 Apr 2026 18:22:19 +0000

> There are dozens of projects like this emerging right now. They all share the same challenge: establishing credibility.

Care to elaborate on the kind of "credibility" to be established here? All these bazillion sandboxing tools use the same underlying frameworks for isolation (e.g., ebpf, landlock, VMs, cgroups, namespaces) that are already credible.

New comment by kjok in "Axios compromised on NPM – Malicious versions drop remote access trojan"

kjok — Wed, 01 Apr 2026 03:31:35 +0000

And this is exactly why we see noise on HN/Reddit when a supply-chain cyberattack breaks out, but no breach is ever reported. Enterprises are protected by internal mirroring.

New comment by kjok in "Axios compromised on NPM – Malicious versions drop remote access trojan"

kjok — Tue, 31 Mar 2026 18:31:27 +0000

I mean that agents can scan the code to find anything "suspicious". After all, security vendors that claim to "detect" malware in packages are relying on LLMs for detection.