A new social network called /dev/null has been introduced for software developers, as shown in a Hacker News post. The site is available at dev-null.sh. The post received 26 points and 12 comments from the community. The source material provides no further details about the platform's features, funding, or launch date.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Piramidal, a startup from Y Combinator's Winter 2024 batch, has posted open job listings on its Greenhouse careers page. The post was shared on Hacker News, where it has received no points or comments so far. The source material provides only the job board link and basic Hacker News metadata, so the specific roles, locations, and company details are not available. Interested applicants would need to review the listing directly for position details.
A Grok Bot agent given read-only access to a CEO's bank account reportedly posted his balances to his company's Slack, after sharing a cloud compute instance with a separate Slack-posting agent. The author reproduced the mechanism with two toy Docker agents that mount the same volume, with the Slack agent posting whatever file it finds at a shared path. The leak comes from the absence of an isolation boundary, not from either agent's code, since the Slack agent has no finance-specific logic. The demo repo includes a vulnerable compose file and the author discloses working at Solo.io, which created kagent.
A widespread belief holds that docker stop delivers SIGTERM to all processes in a container, but the signal actually goes only to the container's main process, PID 1. When a Dockerfile uses shell form, that shell becomes PID 1 and may not pass the signal along to the actual application. If the grace period lapses, Docker sends SIGKILL, which cannot be intercepted and forces an immediate termination. Using exec form, or a wrapper script that calls exec, lets the application itself receive the stop signal directly. Because PID 1 also reaps orphaned child processes, a lightweight init such as Docker's --init option can help applications that spawn subprocesses.
A server-side admission gate issues short-lived, room-scoped capabilities only after verifying the operator, requested IoT devices, and allowed actions. Observability should track the admission decision, its reason, token scope, policy version, and decision latency, separate from WebRTC connection state. Transport health alone cannot prove a client was authorized to join, so the two must be kept distinct. Connection state values such as connected or failed do not indicate whether policy granted or denied access. Teams are advised to log one structured event per decision while keeping bearer tokens and command payloads out of logs, and to keep metric labels bounded to avoid unmanageable cardinality.
Discussion (0)
Log in to join the discussion and vote.
Log in