Topical Takes
Short, opinionated posts on eBPF, Linux internals, and the tools we all run in production.
Is My AI Agent an SSRF Risk? (And How to Fence Its Egress on Linux) (2026)
An agent makes outbound requests to destinations chosen at runtime by content it did not write, which is SSRF with a user manual. Deny link-local and 169.254.169.254 first, put policy around the agent process rather than its command sandbox, and measure the real destination set before writing an allowlist.
Which Process Is Talking to Which Host? (Linux 2026)
ss shows you sockets that exist right now and tcpdump shows you packets with no process attached. To answer which process is talking to which host, you need the connection caught at the moment it is dialed, in the context of the process that dialed it. Here is how to do that on Linux, and when a bpftrace one-liner is the better call.
Can an AI Coding Agent Exfiltrate My Source Code? What a Domain Allowlist Decides, and What It Doesn't (2026)
A domain allowlist decides whether a connection may open, not what goes through it, and the proxy in front of your agent does not read TLS by default. Here are the six ways to control agent egress on Linux in 2026, what each one covers, and how to see every host your agent dialed with claudefeed.