Search

Showing top 105 results for "targeted enforcement"

Top stories

Discussions and forums

Hacker News · u/mrrpdt · 1w ago

Show HN: Typol – Static typing layer for Polars

Hello! Wanted to share Typol, a thin static typing layer around Polars that lets you enforce columnar schemas. We've been hesitant in the past to go with dataframes for processing reporting data, especially with Pandas, …

4 2
Hacker News · u/blacknon · May 19, 2026

Show HN: Childflow – command-tree network control(proxy/DNS/capture) for Linux

Hi HN,I built a Rust-based Linux process only network sandbox command. I developed this because I sometimes needed to enforce proxies and DNS only for single binaries like Go, or to capture packets only for that process.…

1
Hacker News · u/thoughtpeddler · 19h ago

Ask HN: At what point does AI regulation lead to confiscation of compute?

With everything going on lately regarding AI policy, and the cat already being out of the bag with AI systems that can run on feasibly obtainable personal compute, at what point do things tip over governments confiscatin…

2 1
Hacker News · u/0kenx · 1w ago

Show HN: Nucleus – A security-hardened, Nix-native container runtime

Hi HN, I've been building Nucleus, a lightweight Linux container runtime focused on two workloads: ephemeral AI-agent sandboxes and declarative NixOS services. It's a single Rust binary, no daemon.It is not a Docker repl…

37 13
r/kubernetes · u/JulietSecurity · May 17, 2026

CVE-2026-46333 in Kubernetes: unset seccomp let pods reach pidfd_getfd, RuntimeDefault blocked it

CVE-2026-46333 is the Linux __ptrace_may_access() bug Qualys disclosed on May 15. Most of the public discussion I saw centered on ssh-keysign-pwn, but for Kubernetes the more interesting part was the underlying pidfd_get…