Hacker Newsnew | past | comments | ask | show | jobs | submit | octoberfranklin's commentslogin

DoorDash is viable only because the restaurant business (minus national chains) is extremely balkanized. Restauranteurs have very little power.

Unfortunately the model companies will simply reinject the friction by mandating BYOK (Bring Your Own Key -- i.e. the end user must onboard with each model company individually).

OpenAI and Anthropic have already done this.

Mandated BYOK will sink OpenRouter.


This fails to control for the fact that women, on average, live to older ages before dying.

IIRC in other studies where it's controlled for age, a difference still remains.

Access control is the operating system's job, and modern OSes already provide plenty of great tools for doing that.

Just use the existing sandboxing infrastructure like bubblewrap, seccomp, etc. I have way more faith in that than in something than some regex-based blocklist.


You can easily do this with simple Unix `chmod x-rw` on a wrapper that makes HTTP requests, adding the access token as it does.

The point is that you still need to expose a shell or a wrapper around exec to launch those commands. That is t appropriate when I want to lock the model down to working entirely from a sandboxed environment and expose some basic tools which are not “entire posix user space”.

MCP servers are not dead, they’re just overused in contexts they don’t really make sense in.


Editorialized title is not cool, HN.

Yes, that nefarious nation-state threat actor known as GNU IFUNC!

Curses, thwarted again!


I take your meaning, but I think a threat actor targeting a system without IFUNC would be delighted if it suddenly showed up. It's like finding a website with a file upload form that purposefully supports ../ in paths.


Wait isn't that every sub? /s


The problem is that it has become very popular to ban people from a sub based on what other subs they post to. It was turning Reddit into a two-party universe.

The better fix would be to make the support for multiple accounts in the reddit app not so incredibly-shitty, where you're basically logging out and logging back in. Instead, just tell it "posts to this sub use this account, posts to that sub use that account", etc.


That two-party universe thing comes from the issue of having to moderate, and moderation is ideological by nature.


Money is great at thwarting spam/Sybil attacks. You don't have to raise the price very much to make them fail.

Honestly I think "this person is real" is the wrong goal. You'll never accomplish it without a centralized state or some biometric monstrosity like that thing Sam Altman created.

Just settle for stopping spam.


Yeah, I think "pay to enter" or maybe "pay to be able to post" is ultimately going to be the solution. Then we'll have the paid "gated" social networks, filled with mostly humans, and the free ones will all be bot-swarmed wastelands.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: