Hacker News: simonereehttps://news.ycombinator.com/user?id=simonereeHacker News RSShttps://hnrss.org/hnrss v2.1.1Thu, 23 Jul 2026 05:37:55 +0000<![CDATA[New comment by simoneree in "I Inspected My Take-Home Interview Project. It Was a Whole Operation"]]>I don't think you should trust the recruiter's VM any more than their code. Spin up instead your own disposable VM or container with no creds or host mounts.

Clearly, judging by recent openai news, sandboxes are not unbreakable, but at least there's nothing worth stealing and you throw it away afterward.

]]>Wed, 22 Jul 2026 23:33:29 +0000https://news.ycombinator.com/item?id=49014933simonereehttps://news.ycombinator.com/item?id=49014933https://news.ycombinator.com/item?id=49014933<![CDATA[New comment by simoneree in "Over 400 Linux CVEs published in the last 24 hours alone"]]>On a headless VM, almost certainly it's not a worry, since that bug needs a physical port and the driver binding to a plugged-in device (so basically it's never reached). You could even prove it running lsmod showing the module is not loaded (so "not applicable"). Unfortunately the CVSS score doesn't carry reachability information, and not just for the kernel CVEs.

]]>Wed, 22 Jul 2026 22:59:07 +0000https://news.ycombinator.com/item?id=49014618simonereehttps://news.ycombinator.com/item?id=49014618https://news.ycombinator.com/item?id=49014618<![CDATA[Show HN: Free API of 248M aggregated VEX statements: 45% of CVEs not affected]]>Article URL: https://getreel.dev/vex

Comments URL: https://news.ycombinator.com/item?id=48900142

Points: 3

# Comments: 0

]]>Mon, 13 Jul 2026 23:07:21 +0000https://getreel.dev/vexsimonereehttps://news.ycombinator.com/item?id=48900142https://news.ycombinator.com/item?id=48900142