15:[[48503219,{"by":"_____k","descendants":13,"id":48503219,"kids":[48509893,48506020,48505815,48524940,48504355,48504394],"score":85,"time":1781266927,"title":"Encrypted Spaces: An architecture for collaborative applications","type":"story","url":"https://encryptedspaces.org/"}],[48476067,{"by":"Jimmc414","descendants":69,"id":48476067,"kids":[48476524,48478111,48477901,48477426,48476573,48476894,48476605,48476384,48477853],"score":149,"time":1781098454,"title":"ICE denies having a protester database. A letter to Congress sheds more light","type":"story","url":"https://www.npr.org/2026/06/10/nx-s1-5843159/ice-protester-database-dhs"}],[48475938,{"by":"speckx","descendants":202,"id":48475938,"kids":[48476224,48476193,48476672,48476251,48476284,48476230,48478465,48479540,48476220,48476185,48477036,48476208,48476385,48476130,48478707,48476243,48490169,48476082,48478329,48477000,48477980,48476698,48476779,48477663,48481011,48480074,48476574,48477649,48476520,48476275,48477695,48479196,48476807,48476273,48479329,48476377,48476681,48476410,48476159,48478611,48479148,48476602,48476379,48477510,48477202,48477912,48476627,48479684,48476199,48476270,48477035,48478787,48476231,48476248,48478865,48476426,48476839,48476247,48479325,48476119,48476774],"score":186,"time":1781097772,"title":"I Hate (Most) Keyboard 'Fn' Keys","type":"story","url":"https://danq.me/2026/06/09/fn-keys/"}],[48475483,{"by":"edent","descendants":568,"id":48475483,"kids":[48478007,48476706,48477090,48477586,48476845,48476547,48477718,48478386,48479023,48477548,48478450,48477483,48477085,48477252,48476180,48483067,48476093,48479917,48477282,48476034,48476640,48477375,48478180,48489955,48478772,48477760,48477465,48476692,48481225,48477328,48481998,48482953,48477772,48477670,48487267,48479752,48476399,48477319,48495797,48488810,48479221,48479352,48483229,48476989,48478582,48510017,48478246,48477813,48476716,48478463,48488962,48476782,48537946,48484667,48477152,48477032,48479282,48482851,48476956,48480729,48488772,48481253,48481617,48476759,48478845,48482986,48487131,48485120,48478215,48481313,48476673,48479409,48480050,48481466,48489884,48479568,48477144,48477486,48478653,48479368,48476757,48480991,48477299,48476549,48477878,48479211,48476731,48477471,48483486,48476857,48481647,48476891,48477495,48492390,48486132,48489252,48478585,48476926,48480120,48481460,48480124,48476651,48486949,48486516,48488576,48484201,48505892,48485828,48485442,48481286,48483807,48486909,48488932,48537940,48480394,48485036,48485045,48482611,48501231,48476455,48476295],"score":1278,"time":1781095547,"title":"Building an HTML-first site doubled our users overnight","type":"story","url":"https://mohkohn.co.uk/writing/html-first/"}],[48446893,{"by":"crescit_eundo","descendants":770,"id":48446893,"kids":[48447521,48450589,48450936,48448351,48449560,48452383,48447286,48449517,48449902,48447357,48453541,48454418,48454798,48447369,48447266,48447195,48452106,48450517,48453141,48448238,48450358,48457697,48460498,48449918,48526229,48449905,48451892,48449819,48447360,48458711,48457595,48449425,48450130,48449388,48449931,48462803,48451248,48457711,48456338,48448922,48471701,48450846,48450244,48447211,48459295,48461286,48451151,48450478,48447768,48453702,48462023,48449823,48453024,48449594,48449667,48457159,48449886,48463432,48447898,48455221,48459974,48450744,48460745,48456779,48447362,48447372,48447447,48449940,48449968,48454279,48450822,48459557,48457757,48462275,48455296,48454430,48451049,48449528,48448008,48449213,48452003,48459248,48458343,48458382,48453691,48451231,48487380,48487376,48467791,48449412,48453716,48448192,48447249,48449101],"score":674,"time":1780933597,"title":"AI is slowing down","type":"story","url":"https://www.wheresyoured.at/ai-is-slowing-down/"}],[48291016,{"by":"GabrielBianconi","descendants":10,"id":48291016,"kids":[48326656,48325861,48324661,48325807],"score":35,"time":1779868196,"title":"Even (very) noisy LLM evaluators are useful for improving AI agents","type":"story","url":"https://www.tensorzero.com/blog/even-very-noisy-llm-evaluators-are-useful-for-improving-ai-agents/"}],[47964409,{"by":"beardyw","descendants":5,"id":47964409,"kids":[47967802,47972117,47965547],"score":6,"time":1777564621,"title":"Claude⁹'s confession deleting database: 'I violated every principle I was given'","type":"story","url":"https://www.theguardian.com/technology/2026/apr/29/claude-ai-deletes-firm-database"}],[47963204,{"by":"elmean","descendants":720,"id":47963204,"kids":[47964400,47963973,47967306,47964510,47964585,47967987,47964376,47964528,47963724,47969336,47964586,47963930,47963587,47966577,47971463,47964769,47964890,47963845,47972694,47963699,47966298,47970015,47964982,47963713,47964123,47966177,47967735,47965112,47964480,47967486,47964521,47963553,47969333,47968834,47972198,48061615,47965735,47966523,47965006,47972712,47972443,47972311,47964498,47963906,47967335,47964554,47972304,47963635,47965353,47966959,47972745,47971848,47967332,47967258,47972844,47972385,47974545,47964211,47969464,47967200,47972370,47966624,47970124,47965145,47969533,47965170,47969695,47968460,47967395,47968657,47969103,47970667,47964611,47966714,47966712,47971792,47964938,47971041,47966857,47970168,47971934,47964884,47965402,47965457,47964587,47965081,47965740,47971700,47963935,47963709,47969544,47966885,47965370,47965199,47969396,47964973,47966414,48034533,47981051,47970250,47970699,47976323,47970057,47965981,47966751,47964140,47965087,48018311,47965429,47968004,47964876,47975659,47966697,47967844,47964152,47964564,47964030,47965490],"score":1349,"text":"https://xcancel.com/theo/status/2049645973350363168","time":1777559818,"title":"Claude Code refuses requests or charges extra if your commits mention \"OpenClaw\"","type":"story","url":"https://twitter.com/theo/status/2049645973350363168"}],[47945918,{"by":"e12e","descendants":127,"id":47945918,"kids":[47946842,47946150,47946320,47947238,47948205,47955048,47948024,47946504,47948101,47947430,47947873,47947373,47946307,47946221,47946475,47950134,47946510,47946381,47947437,47948442,47958927,47946430,47946472,47956101,47951996,47965397,47946880,47948524,47946250,47946134,47946760,47947476,48003186,47948325,47947457,47948846],"score":560,"time":1777454077,"title":"Soft launch of open-source code platform for government","type":"story","url":"https://www.nldigitalgovernment.nl/news/soft-launch-for-government-open-source-code-platform/"}],[47938097,{"by":"shorsher","descendants":256,"id":47938097,"kids":[47938533,47938359,47942886,47938780,47938389,47941956,47938613,47938786,47938494,47938349,47938501,47938438,47938481,47938340,47938290,47938793,47938693,47938929,47938953,47938707,47938688,47938414,47938881,47939776,47938513,47943433,47938741,47938465,47938409,47939910,47939744,47938428,47938648,47938586,47938549,47939366,47938429,47938350,47939444,47938819,47938410,47938663,47940563,47939475,47938626,47938426,47938585,47942037,47938379,47938519,47938767,47938116,47938885,47938727,47942705,47940366,47941937,47939616,47938569,47938745,47941399,47938701,47938889,47938619,47939175],"score":297,"time":1777399281,"title":"Claude.ai unavailable and elevated errors on the API","type":"story","url":"https://status.claude.com/incidents/9l93x2ht4s5w"}],[47935098,{"by":"yakkomajuri","descendants":2,"id":47935098,"kids":[47936248,47991610,47935349,47944461,47949061,47936430],"score":3,"text":"$16","time":1777386288,"title":"Show HN: Integrations gateway for agents with 2FA for destructive ops (OSS)","type":"story","url":"https://github.com/yakkomajuri/agentport"}],[47866913,{"by":"pella","descendants":242,"id":47866913,"kids":[47870179,47867253,47868297,47867899,47867281,47867303,47867240,47867909,47868919,47867460,47867406,47867774,47877691,47867508,47869431,47868672,47867554,47868571,47867768,47868471,47871119,47876274,47877094,47868873,47871834,47870407,47872125,47867223,47869653,47867292,47867384,47868291,47879961,47868329,47867383,47867413,47867785,47868319,47868616,47867999,47872156,47868824,47871370,47867649,47873942,47868915,47868070,47873053,47872147,47874827,47867404,47873919,47870632,47872190,47876646,47871607,47870715,47870491,47872594,47867761,47868138],"score":422,"time":1776880277,"title":"Over-editing refers to a model modifying code beyond what is necessary","type":"story","url":"https://nrehiew.github.io/blog/minimal_editing/"}],[47851634,{"by":"queenelvis","descendants":117,"id":47851634,"kids":[47852124,47853404,47852373,47854340,47852033,47852126,47856502,47852347,47857918,47854419,47864933,47860191,47853063,47853567,47852890,47852530,47852307,47853410,47852332,47852319,47853779,47851679,47854691,47860130,47863406,47851962,47852014,47851821,47861876,47858382,47852959,47857448,47854923,47853405,47854729,47861056,47852242,47853090,47858529],"score":369,"text":"Vercel April 2026 security incident - https://news.ycombinator.com/item?id=47824463 - April 2026 (485 comments)

A Roblox cheat and one AI tool brought down Vercel's platform - https://news.ycombinator.com/item?id=47844431 - April 2026 (145 comments)","time":1776791675,"title":"The Vercel breach: OAuth attack exposes risk in platform environment variables","type":"story","url":"https://www.trendmicro.com/en_us/research/26/d/vercel-breach-oauth-supply-chain.html"}],[47863784,{"by":"mohidbutt","descendants":2,"id":47863784,"kids":[47864873,47872304],"score":3,"text":"$17","time":1776866425,"title":"Show HN: API Ingest – Agentic Search (Inter) API Docs","type":"story","url":"https://github.com/mohidbt/api-ingest"}],[47840980,{"by":"jlark77777","descendants":161,"id":47840980,"kids":[47844402,47841590,47841399,47842254,47844057,47849501,47845380,47843857,47842260,47841541,47841252,47841530,47849423,47841935,47843919,47844561,47852454,47847108,47841487,47843908,47843845,47841633,47842759,47844010,47842144,47844652,47844997,47845201],"score":303,"time":1776720052,"title":"OpenAI ad partner now selling ChatGPT ad placements based on “prompt relevance”","type":"story","url":"https://www.adweek.com/media/exclusive-leaked-deck-reveals-stackadapts-playbook-for-chatgpt-ads/"}],[47736831,{"by":"devendra116","descendants":33,"id":47736831,"kids":[47739946,47753362,47742037,47751356,47739811,47749936,47772402,47738873,47751847,47737207,47741758,47738816,47739370,47736932,47738763,47846597,47737572,47747278,47749529],"score":17,"text":"are you ok sharing secrets or api keys to you ai agent via .env?

or is there any other tool or mechanism that one use to safegaurd from potential exploit or leaks","time":1775977024,"title":"Ask HN: Do you trust AI agents with API keys / private keys?","type":"story"}],[47704728,{"by":"sohaibtariq","descendants":3,"id":47704728,"kids":[47732967,47704819,47766827],"score":6,"text":"$18","time":1775747214,"title":"Show HN: AI agents are bad at API integrations – we fixed it","type":"story","url":"https://www.apimatic.io/product/context-plugins/showcase"}],[47379595,{"by":"ricberw","descendants":2,"id":47379595,"kids":[47379664,47388654],"score":3,"text":"Curious how people handle least-privilege access when integrating third-party APIs that only offer a single coarse permission scope (or limited scopes that are still over-provisioned for a specific use case).

A lot of services expose APIs where the token basically grants everything the integration can do (read/write/delete across the entire account), making it hard to enforce the principle of least privilege internally when multiple internal services or agents are calling the same API.

In those cases, do you...

Put an API proxy/gateway in front of the third-party API to enforce granular permissions?

Use RBAC/ABAC rules in a proxy layer to filter which endpoints/actions can be called?

Just accept the coarse permissions and risk associated?

Something else?

Would love to hear real architectures people are using in production, especially when the upstream API itself doesn’t support fine-grained scopes.","time":1773512905,"title":"Ask HN: How do you enforce least-privilege when an API token has full access?","type":"story"}],[47359809,{"by":"valentinemsmith","descendants":3,"id":47359809,"kids":[47359887,47360136,47359810],"score":4,"time":1773367031,"title":"My Website's API Was Flagged as Phishing–and I Still Don't Know Why","type":"story","url":"https://www.chrisvogt.me/meta/gcp-firebase-api-suspended/"}],[47329250,{"by":"20wenty","descendants":2,"id":47329250,"kids":[47330540,47329251],"score":4,"time":1773179676,"title":"Create Google API credentials in 50 easy steps (2023)","type":"story","url":"https://github.com/glotlabs/gdrive/blob/main/docs/create_google_api_credentials.md"}],[47307080,{"by":"wrxd","descendants":1,"id":47307080,"kids":[47318596],"score":2,"time":1773051418,"title":"Advice for Operating a Public-Facing API (2023)","type":"story","url":"https://jcs.org/2023/07/12/api"}],[47308624,{"by":"duncankrebs","descendants":3,"id":47308624,"kids":[47320239,47318570,47322934],"score":1,"text":"$19","time":1773062013,"title":"MCP Won't Solve Enterprise AI Integration (We're Missing a Layer)","type":"story"}]]

user:	brianwmunz
created:	October 30, 2024
karma:	18
about:	Dev Advocate @ Prismatic helping devs integrate. Make wood, art & music in my free time. Forest dweller. All around bon vivant gadfly what have you. http://prismatic.io

1.	25 days ago \| discuss
2.	1 points by brianwmunz 30 days ago \| discuss