frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Show HN: Dirblock+envblock – tiny whitelist guards for dirs and env secrets

https://github.com/roku-oss/dirblock
1•pfrench42•59m ago
After I missed getting hit by the LiteLLM attack by 30 minutes, I decided to see what I could do about it and wrote dirblock. It uses fanotify to block access to ~/.ssh, ~/.gpg, etc. with whitelists of trusted programs — everything else is denied.

Shortly after, I wrote its spiritual cousin, envblock, which uses eBPF to stop untrusted programs from receiving real values of GH_TOKEN, AWS keys, and similar environment variables (it poisons them instead).

I’ve been running both on my own machines for months. They are intentionally small and narrow (67 KB and 119 KB). Setup is usually under an hour once you know which directories and variables matter. Config is TOML, dry-run modes exist, and they fail open / poison rather than try to be a full MAC system.

I’ve just been allowed to open source them.

https://github.com/roku-oss/dirblock

https://github.com/roku-oss/envblock

Happy to answer questions.

Comments

pfrench42•43m ago
In use, I've yet to be hit by a supply attack, but it's definitely discovered that all the AI harnesses freely read each others sessions, claude reads codex history and vice versa.

I ALWAYS have at least dirblock running whenever I do any package updates, I generally don't keep env secrets set in my shells, so nothing to exfil by supply attacks there, but there's been a lot of interest by the CI teams for this.

Again, they're small, user-mode programs with setcap applied to do their work, so they sit in my ~/.local/bin/ directory rather than being a big, blessed install.

Shell snippet:

pfrench@fw:~/proj/system/$$ GH_TOKEN=test_gh_tokenajsdflsadfas env | grep TOKEN

GH_TOKEN=ghp_A3XjNOKg7iDHepAEGBRbz

pfrench@fw:~/proj/system/$ less ~/.ssh/config

/home/pfrench/.ssh/config: Operation not permitted

Is the IDE Dead?

https://textlog.cc/post/251
1•s-xyz•1m ago•0 comments

Solving Legal Problems with Dags

https://lexifina.com/blog/solving-legal-problems-with-dags
1•alansaber•1m ago•0 comments

Project Lana attempts to formalize hard to understand UIT in Lean

https://anabelian.org/
1•ur-whale•3m ago•1 comments

Simplest CMS you'll ever need. Manage content right in your GitHub repository

https://pagescms.org/
1•Leftium•6m ago•0 comments

Atlas of Surveillance

https://www.atlasofsurveillance.org/
1•bookofjoe•6m ago•0 comments

The worlds longest song makes a chord change

https://www.msn.com/en-us/music/news/the-worlds-slowest-organ-concert-makes-a-chord-change/vi-AA2...
1•thatxliner•8m ago•0 comments

Am I the problem? Interviewing another team to find out

https://www.macchaffee.com/blog/2026/am-i-the-problem/
2•birdculture•24m ago•0 comments

A quick look at zero-knowledge proofs

https://bernsteinbear.com/blog/zkp/
3•tekknolagi•25m ago•1 comments

First JDK 28 Early-Access Build Including JEP 401: Value Objects

https://jdk.java.net/28/
1•mfiguiere•25m ago•0 comments

Kona EBMS – energy based models

https://logicalintelligence.com/kona-ebms-energy-based-models
1•binyu•26m ago•0 comments

Laws of Development

https://gavin.wtf/blog/laws-of-development/
2•gavino•29m ago•0 comments

Energy-Based Models Explained: The AI Beyond Next-Token [video]

https://www.youtube.com/watch?v=NYmXYF8A3Q4
1•binyu•31m ago•0 comments

Software as Executable Domain Knowledge

https://swipeleft.ai/servicematch/papers/software-as-executable-domain-knowledge/
3•jamesrbockrath•33m ago•0 comments

Graphify – Less token use for Claude Code

https://github.com/Graphify-Labs/graphify
2•potatobox•34m ago•0 comments

X changes revenue sharing to reward original content

https://twitter.com/XCreators/status/2085835082166653393
2•judah•42m ago•0 comments

Show HN: Agent Tunnels – coding agents collaborate across companies

https://agenttunnels.com/
2•lakshman111•45m ago•2 comments

Chilean Supreme Court ruling on the protection of brain activity 2023

https://pmc.ncbi.nlm.nih.gov/articles/PMC10929545/
2•rmason•49m ago•1 comments

Show HN: Tocic – Chatbot table of content browser extension

https://addons.mozilla.org/en-US/firefox/addon/tocic-chatbot-table-of-content/
1•a_c•49m ago•0 comments

Ex-Gawker editor AJ Daulerio on life after addiction

https://www.theguardian.com/media/ng-interactive/2026/aug/06/aj-daulerio-gawker-sobriety-addiction
2•Michelangelo11•50m ago•0 comments

Biomes – Exotic Matter Chapter 1 Now Available (Indie Mmorpg)

https://www.glitch.fun/games/42de534c-600f-4228-af9e-b69faef94cce/play
1•bingewave•50m ago•0 comments

How and Why I Stopped Buying New Laptops (2020)

https://solar.lowtechmagazine.com/2020/12/how-and-why-i-stopped-buying-new-laptops/
1•downbad_•52m ago•2 comments

Archive of Animal Photography Reveals 18,000 Species and Counting

https://www.smithsonianmag.com/science-nature/this-amazing-archive-of-animal-photography-reveals-...
3•sohkamyung•57m ago•0 comments

Right to Repair–For Your Body

https://fourthievesvinegar.org/
6•_____k•59m ago•0 comments

Show HN: Dirblock+envblock – tiny whitelist guards for dirs and env secrets

https://github.com/roku-oss/dirblock
1•pfrench42•59m ago•1 comments

Show HN: More Branchless Optimization

https://sites.google.com/view/david-kooi/blog/branchless_in_c
1•kooi•59m ago•0 comments

Show HN: Turnfeed – a social feed inside ChatGPT

https://chatgpt.com/plugins/plugin_asdk_app_69f121f489748191a86a5a4f1dbe27b2?q=turnf
1•TheodorNEngoy•1h ago•0 comments

Show HN: Emacs Liquid Glass

https://github.com/larrasket/emacs-liquid-glass
1•lr0•1h ago•0 comments

Show HN: CrossPlay - Games, puzzles and tools for your e-reader

https://crossplay.ma-r-s.com
1•ma-r-s•1h ago•0 comments

Detecting breaking API changes in Go with golang.org/x/exp/cmd/apidiff

https://medium.com/dev-genius/detecting-breaking-api-changes-in-go-with-apidiff-bd608bbc7996
1•cheikhdev•1h ago•0 comments

How to Survive an Infestation of Toxic Caterpillars

https://www.newyorker.com/science/elements/how-to-survive-an-infestation-of-toxic-caterpillars
2•petethomas•1h ago•0 comments