Hi 👋

I’m Ilya — CTO and co-founder of iProxy.online, also running Sintonia Strategy & Technology on the side. Engineer and entrepreneur, based in Portugal.

This hub collects my originals plus reposts from my projects. More on the about page.

I was afraid of agents yolo-mode for half a year

Why I built agent-landlock — a small Go wrapper that uses Linux Landlock LSM to give coding agents YOLO mode without letting them escape the project directory.

May 10, 2026 Â· 2 min

Hardware-backed SSH keys end to end: YubiKey, PIV, software alternatives, and where SSH CAs fit in

A working guide to using a YubiKey for SSH on a real Linux fleet — the four knobs (resident, touch, PIN, agent), a four-mode policy for root and Ansible, software-only alternatives, and where SSH CAs fit in.

May 9, 2026 Â· 19 min

SSH Tunnel Magic: Your SSH Already Is Tailscale

SSH punching for everyone who only knows ssh user@host — how -D replaces a corporate VPN, -R replaces a mesh VPN for NAT’d boxes, and -L forwards Unix sockets. 3 flags, 3 bonuses, 1 man page.

April 24, 2026 Â· 5 min

180 Breaches a Second: How Software Broke Its Promise, and the Radical Fix Hiding in Plain Sight

180 accounts are breached every second — and most of it comes down to reused passwords and missing MFA. A look at the software quality collapse behind the headlines, and why the fix is the same infrastructure-level move HTTPS once made: passkeys, on-device DLP, and capability-scoped AI agents.

April 3, 2026 Â· 27 min

When TLS 1.3 Silently Dies Inside Your Android Proxy

A post-mortem of intermittent HTTPS failures across a mobile proxy fleet: TLS 1.3 handshakes silently dying on memory-starved Android devices — large multi-packet handshake messages, inflated by post-quantum key shares, stressing proxy buffers under memory pressure.

March 20, 2026 Â· 7 min

Systemd Unreclaimable Kernel Memory Leak

How a frequently-restarting systemd unit with Type=exec leaked unreclaimable kernel slab memory (~60 MB/day) on Ubuntu hosts via a cgroup memory-accounting bug — and why only a full host reboot could free it.

February 19, 2026 Â· 4 min