Matthew Slipper's banner
Matthew Slipper's profile picture

Matthew Slipper

@mslipper • 1,560 subscribers

Building https://t.co/0pucqh9KLy

Shorts

We open-sourced iron-proxy yesterday: a default-deny egress proxy for untrusted workloads. CI is a natural place for this. GitHub Actions runners have unrestricted outbound network access by default. Every dependency, every post-install script, every agent tool call can reach any endpoint on the internet. iron-proxy sits between the runner and the network. Allowlist what should talk to the internet. Log everything. Block everything else. Repo: Walkthrough 👇

We open-sourced iron-proxy yesterday: a default-deny egress proxy for untrusted workloads. CI is a natural place for this. GitHub Actions runners have unrestricted outbound network access by default. Every dependency, every post-install script, every agent tool call can reach any endpoint on the internet. iron-proxy sits between the runner and the network. Allowlist what should talk to the internet. Log everything. Block everything else. Repo: Walkthrough 👇

19,276 次观看

Videos

LIVE
1.2k

Anya Rossi

sweetdream.ai

SweetDream.aiSponsored•Livecam
Streaming Now

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

HD live stream
Exclusive private shows
1.2k viewers online

Free preview available • Premium content

Here's a supply chain attack running on an VM. It's so obvious even Claude catches it. But it doesn't matter: by the time Claude sees it, the attack is done. Except in this case, it isn't. Egress rules block it. Real attacks won't look like this. You need real containment.
0:20
mslipper's profile picture

Here's a supply chain attack running on an VM. It's so obvious even Claude catches it. But it doesn't matter: by the time Claude sees it, the attack is done. Except in this case, it isn't. Egress rules block it. Real attacks won't look like this. You need real containment.

Matthew Slipper

11,575 次观看 • 3 个月前

没有更多内容可加载