0dd's comments | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit | 0dd's comments

0dd 52 days ago | parent | context | [–] | on: Comment and Control: Prompt Injection in Claude Co...

Author here. Happy to answer questions

0dd 6 months ago | parent | context | [–] | on: Claude Code's "No Network Access" Sandbox Was Wide...

A full technical analysis with PoC video:

https://oddguan.com/blog/anthropic-sandbox-cve-2025-66479/

1. Docs promised empty allowedDomains = no network access but Actually disabled all restrictions (macOS + Linux) 2. No CVE for Claude Code, Compare: React & Next.js both got CVEs for RSC issue

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact