News for hackers. Stuff that matters.

A comment on Don't YOLO your file system. Parent comment

Re:Don't YOLO your file system by hrmtst93837 on Saturday March 28, 2026 @02:17AM (#47552105)
Letting an agent loose with SSH keys is fine when the blast radius is one disposable VM, but scale that habit to prod or the wrong subnet and you get a fast refresher on why RBAC exists, why scoped creds exist, and why people who clean up after outages get very annoyed by this whole genre of demo. Feels great, until it doesn't.
[ Parent | on HN ]
Re:Don't YOLO your file system by throwingSE on Wednesday April 01, 2026 @07:46PM (#47608165)
jai is doing the right thing for its threat model. The credential layer is a different surface though ... an agent with a broad API token can call initiate_payment or update_vendor_bank on a remote production system and the filesystem sandbox can't help.

Applying the same principle as jai for remote boundaries, we can scope API authority to the task

[ Parent | on HN ]