Hacker News: lobovkin

New comment by lobovkin in "eMudhra intermediate CA compromise"

lobovkin — Wed, 21 Oct 2026 07:19:42 +0000

Someone has pushed over 100k certificates for google.com into CT logs today, signed with the compromised EV G3B key: https://ctlogs.dev/ca/e7568fe6e12331f4fd7de61da4c7559d0f8eb1... https://ctlogs.dev/search?q=*.google.com

Show HN: testmagic.link – Zero-setup magic link testing for coding agents

lobovkin — Thu, 20 Aug 2026 13:08:03 +0000

I built testmagic.link because Claude Code kept using my personal Gmail when testing magic-link authentication, filling my inbox with test emails.

I know there are existing email testing services, but the ones I found require signing up, getting credentials, and integrating an API. That felt like overkill when I just wanted to tell Claude Code: "test the email sign-in using testmagic.link".

So I made testmagic.link. No signup, no API keys, no integration. It’s basically a one-liner with a domain that’s easy to remember. I also added an llms.txt file at the root, so agents instantly know how to read the inbox without me explaining it.

There’s also an optional mail-scanner simulation: add ?prefetch=1 to the inbox URL, and testmagic.link will GET each message’s magic link once before you open it, without following redirects — similar to how Outlook Safe Links or a corporate mail scanner might prefetch links. This is useful for catching magic-link flows that break when a security scanner visits a single-use link first.

Would love to hear your feedback, or if you've run into any other weird email auth edge cases I should simulate. I'll be around to answer questions!

Comments URL: https://news.ycombinator.com/item?id=49374124

Points: 3

# Comments: 0

Show HN: ssh.bot – Controlled SSH Access for AI Agents

lobovkin — Mon, 16 Mar 2026 23:54:41 +0000

Article URL: https://ssh.bot

Comments URL: https://news.ycombinator.com/item?id=47406716

Points: 1

# Comments: 1

New comment by lobovkin in "[dead]"

lobovkin — Tue, 13 Feb 2024 21:25:19 +0000

This isn't some new way to get Gmail on your domain, but it's easier and faster to set up with the browser extension. In wizard mode, you first set up all mail forwarding from your domain (wildcard *@yourdomain.com) to your Gmail address. A free plan from the EForw email forwarding service is used. Then it is set up to send mail from Google's servers via the "Send As" feature. So outgoing emails from your domain will have a good sender reputation. I will be happy to feedback/suggestions for improvement.