News for hackers. Stuff that matters.

A comment on Ask HN: Are we ready for vulnerabilities to be words instead of code?. Parent comment

Re:Ask HN: Are we ready for vulnerabilities to be words inst... by lielcohen on Thursday March 19, 2026 @05:35PM (#47446569)
Sure, that works today. But Meta is cutting 20% of its workforce. So is everyone else. The whole bet is that agents replace human work - and that only works if they can actually do things. Deploy, access databases, call APIs.

"Don't give it access" is like saying "don't connect to the internet" in 1995. The question isn't whether agents get these permissions. They will. The question is what happens when they do.

[ Parent | on HN ]
Re:Ask HN: Are we ready for vulnerabilities to be words inst... by nine_k on Thursday March 19, 2026 @06:50PM (#47447507)
Let's see how well it works for them. Apparently Salesforce had been a bit overly enthusiastic about layoffs, and recently had to backtrack.
[ Parent | on HN ]
Re:Ask HN: Are we ready for vulnerabilities to be words inst... by codingdave on Friday March 20, 2026 @03:56AM (#47451731)
"Don't connect to the internet" also remains a solid piece of advice for securing your computing resources.

It really doesn't matter what companies are doing. There are some sensible basic practices that make things secure. If people choose not to do those things, for whatever reason, shit will happen.

What you might want to look into is risk management practices. That is where decisions of which risks, consequences, and mitigations best balance the gap between business needs vs. technical constraints.

[ Parent | on HN ]