
We Spent an Hour Trying to Get Past a Claude Code Deny Rule
We denied reads of one file and calls to curl, then tried eight ways around it. Six were blocked, including cat, sed and a chained command. The two that were not still stopped and asked.

We denied reads of one file and calls to curl, then tried eight ways around it. Six were blocked, including cat, sed and a chained command. The two that were not still stopped and asked.

Tailcat drops Tailscale's control plane entirely, and 675 points of Hacker News noticed it still depends on Tailscale's DERP relays, which Tailscale discourages self-hosting.

A published inventory of ChatGPT Work lists 232 tool interfaces, 44 skills and 615,000 characters of skill source. Its browser skill deliberately withholds its own instructions, and the reason is arithmetic.

The default user shipped in the docker group, which is root without a prompt. 522 points and 525 comments, patched in 4.0.1, and the AI agent angle nobody planned for.
Zero replies, and it describes the lock-in lever already in use. Only 2 of 418 comments mention the AAGUID.
The most replied-to comment in the thread, and the metadata we checked backs it: 54 of 62 passkey managers are not in FIDO's list.
94 of the 418 comments argued about attestation. FIDO's own metadata does not list Apple's or Google's passkey managers at all.