Hacker Newsnew | past | comments | ask | show | jobs | submit | bytesandbots's favoriteslogin

One of the authors here. Thanks for posting. If you are interested in learning more about MCP and agent security, check out some of the following resources, that we have created since we started working on this:

* The full execution trace of the Claude session in this attack scenario: https://explorer.invariantlabs.ai/trace/5f3f3f3c-edd3-4ba7-a...

* MCP-Scan, A security scanner for MCP connections: https://github.com/invariantlabs-ai/mcp-scan

* MCP Tool Poisoning Attacks, https://invariantlabs.ai/blog/mcp-security-notification-tool...

* WhatsApp MCP Exploited, https://invariantlabs.ai/blog/whatsapp-mcp-exploited

* Guardrails, a contextual security layer for agents, https://invariantlabs.ai/blog/guardrails

* AgentDojo, Jointly evaluate security and utility of AI agents https://invariantlabs.ai/blog/agentdojo


Spicy take: read the narrative non-fiction business books. They are written for entertainment and sit in the business section but you can learn things.

barbarians at the gate

when genius failed

bad blood

billion dollar whale

chaos monkey

liars poker

shoe dog

american kingping

broken code

soul of a new machine

and so on. There is nothing wrong with entertainment and since these are usually written by journalists or professional writers, the writing is often better.


Here are some things I found helpful using Windows at work (at home I use Fedora):

Debloat / Software Management: https://github.com/ChrisTitusTech/winutil

Command line software management (Scoop): https://pilabor.com/blog/2021/12/automate-windows-app-setup-...

Comparison (Scoop/Chocolatey/Win-Get): https://daftdev.blog/2024/04/01/chocolatey-vs-scoop-vs-winge...

I would also recommend starship (https://starship.rs/) for your Powershell, which is cross platform and therefore usable for all popular shells. Scoop can also install and manage nerd fonts:

    scoop bucket add nerd-fonts
    scoop install nerd-fonts/JetBrains-Mono
Here is my starship.toml config:

    format="$all\u001b7${fill}$cmd_duration | $time\u001b8"
    
    [fill]
    symbol = " " 
    
    # right_format = """$cmd_duration$time"""
    
    [username]
    show_always = true
    format = '[$user[@](red)]($style)'
    
    [hostname]
    ssh_only = false
    format = "[$ssh_symbol$hostname]($style): "
    
    [time]
    disabled = false
    format = '[$time]($style)'
    
    [character]
    success_symbol = '[>](bold green)' 
    
    [git_branch]
    format = "[$symbol$branch(:$remote_branch)]($style)"
    
    [cmd_duration]
    min_time = 0 
    format = '   [$duration]($style) '
    show_milliseconds = true

Altman often uses tactical charisma to trap gullible people, government entities, and any unsuspecting powerful person for his ends. He will not bat an eyelid to take whatever unethical route if that gives him "moat". He relentlessly talks as if "near-term AGI" is straining to get out of the bottle in his ClosedAI basement. He will tell you with great concern about how "nervous" or "scared" (he said this to the US Congress[1]) of what he thinks his newest LLM model is gonna let loose on humanity.

So he's here to help regulate it all with an "international agency" (see the reference[2] by windexh8er in this thread)! Don't forget that Altman is the same hack who came up with "Worldcoin" and the so-called "Orb" that'll scan your eyeballs for "proof of personhood".

Is this sleazy marketer the one to be trusted to lead an effort that has a lasting impact on humanity? Hell no.

[1] https://news.ycombinator.com/item?id=38312294

[2] https://news.ycombinator.com/item?id=40423483



Shameless promotion: Hurl [1] is an Open Source cli using libcurl to run to test HTTP requests with plain text!

We use libcurl for the super reliability and top features (HTTP/3 for instance) and we've added little features like:

- requests chaining,

- capturing and passing data from a response to another request,

- response tests (JSONPath, XPath, etc...)

There is nice syntax sugar for requesting REST/SOAP/GraphQL APIs but, at the core, it's just libcurl! Using verbose option, you can grep the curl commands for instance. (I'm one of the maintainers)

[1]: https://hurl.dev


Some contradictory Maths responses, and an apology from ChatGPT:

Me:

Is Pi times 3 a rational number?

ChatGPT:

No, 3 times pi is not a rational number. 3 times pi is equal to 3π, which is an irrational number. This is because the number pi (π) is an irrational number, and when you multiply an irrational number by a rational number (in this case, 3), the result is still an irrational number. So, 3π is an irrational number because it is the product of the irrational number pi (π) and the rational number 3.

Me:

Is pi times 25 a rational number?

ChatGPT:

Yes, pi times 25 is a rational number. Pi times 25 is equal to 25π, which is a rational number. This is because the number pi (π) is an irrational number, but 25 is a rational number, and when you multiply a rational number by an irrational number, the result is a rational number. In this case, the irrationality of pi is "cancelled out" by the rational factor 25, resulting in a final product that is a rational number. So, 25π is a rational number because it is the product of the irrational number pi (π) and the rational number 25.

Me:

You have said both that "when you multiply a rational number by an irrational number, the result is a rational number" and "if you multiply a rational number with an irrational number, the product is always irrational. " Both statements cannot be true.

ChatGPT:

You are correct that both of those statements cannot be true. My previous responses were based on the assumption that you were asking about specific examples of multiplying a rational number by an irrational number, such as 3/1 times pi or 25/1 times pi. In those cases, the resulting product is either a rational number or an irrational number, depending on the specific numbers involved in the calculation. However, in general, the product of a rational number and an irrational number is always an irrational number. This is because an irrational number cannot be expressed as a simple fraction, so even if one of the factors in the product is a rational number, the result will still be irrational. For example, if you multiply the rational number 3 with the irrational number √2, the result is the irrational number 3√2. I apologize if my previous responses were unclear or contradictory. I will do my best to provide clear and accurate information in the future.


The author of this article is a public defender in the pacific northwest. He sometimes writes for Jesse Singal, but he also has his own substack.[1] Many of his posts provide a unique window into the criminal justice system. If that sounds interesting to you, I strongly recommend reading more of his writing. In my opinion, his greatest hits are Eleven Magic Words[2] and Death of a Client[3].

1. https://ymeskhout.substack.com/

2. https://ymeskhout.substack.com/p/eleven-magic-words-unlocked

3. https://ymeskhout.substack.com/p/death-of-a-client


Sure nice gear helps immensely, but also remember to high-pass filter your vocals, and test for harsh frequencies using subtractive EQ. A slight dip in the 300-600Hz range helps eliminate hollow, boxy sounds, and a top end shelf will help consonants sound more clear. Some people will also low-pass filter the extreme top ends, but it's not always needed. Using a good compressor in your vocal chain will help immensely also to keep spikes and transients more level and not hurt your audience's ears.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: