

Every SSL certificate is publicly logged(you can see these logs e. g. under crt.sh) and you might be able to read DNS records to find new (sub)domains. The modern internet is too focused on being discoverable and transparent to make hiding an entire service(domain + servers) feasible. But things like example.com/dhusvsuahavag8wjwhsusiajaosbsh are entirely unfindable as long as they are not linked to




There is a cli flag that will accept every command the model wants to run automatically. It’s --dangerously-skip-permissions . I don’t know why anyone would use that outside of a container(or run any ai agent dev tool outside if a container), but that’s probably what the person in the post did.