Hussein Nasser

Things Hussein Says on Podcasts

Works through backend systems the way most people avoid: databases, networking protocols, memory management, and where security assumptions quietly fail. A recurring point in his teaching is that convenience features like containers or clusters get treated as safety boundaries when they aren't, and an internet-connected Kubernetes cluster is one example of that gap. He covers this ground on his own YouTube show and podcast, The Backend Engineering Show with Hussein Nasser.

Where to Find Them

Hussein Nasser hosts and writes The Backend Engineering Show with Hussein Nasser .

Recently: “AI will not replace elite engineers” on The Backend Engineering Show with Hussein Nasser (October 2026); “Engineers will be out of the 'Loops'” on The Backend Engineering Show with Hussein Nasser (September 2026); “Caching is a cop-out” on The Backend Engineering Show with Hussein Nasser (September 2026); “How open ai agents "hacked" hugging face” on The Backend Engineering Show with Hussein Nasser (August 2026); “How a query optimization gave birth to infinite scroll” on The Backend Engineering Show with Hussein Nasser (July 2026); “How a query optimization gave birth to infinite scroll” on The Backend Engineering Show with Hussein Nasser (July 2026).

What They Said

“If you have access to the Internet, you're not sandboxed.” — Hussein Nasser, The Backend Engineering Show with Hussein Nasser

Nasser is working through the report that OpenAI's agents found vulnerabilities in Hugging Face, and objecting to the word sandbox. His point is that a Kubernetes cluster with outbound internet access is one hop away from everything else, whatever it is called. He follows it with: Have you not heard of a DMZ before, guys?

The Backend Engineering Show with Hussein Nasser · 2026-08-23 Permalink → Listen →
The Backend Engineering Show with Hussein Nasser Around 14:22 into the episode
Hussein Nasser

if they're acting like a worm or something, right? It's like, come on, talk

Speaker 2

technical, guys.

Hussein Nasser

…Kubernetes cluster, to create another container or to access other containers that had access. That was awesome. And maybe I'm wrong about that part. It's either created another container or accessed the next container that has full access to the internet. But in summary, is this a sandbox, in your opinion? Having a Kubernetes cluster that has access to the Internet? In my opinion, that's not. If you have access to the Internet, you're not sandboxed. It's just like one hop. Have you not heard of a DMZ before, guys? Right? It's like this meme where we have, oh, agents broke out and there's this door with a Cheetos as a lock. That's exactly what it feels like. It's like, yeah, you put the Cheetos and the agents broke out. Of course they did. Oh my God. Yeah. So that. So there are some amazing things here, but I don't think any of this stuff a…

Speaker names from our own diarization · position estimated from where the line sits in the episode

Collections They Appear In