Commenters debated Microsoft's Mxc execution containers as a response to agent containment, with several arguing it doesn't address the deeper permissioning mess. Moomin said the industry has become “ridiculously bad” at permissioning and warned Mxc risks adding complexity across identity and resource models; Joker_vD questioned whether an agent can be its own security principal and criticized the announcement as sloppy. 3eb7988a1663 asked if Mxc can serve as a general app-permissions boundary or will be limited to labeled “agents,” and expressed suspicion that advanced controls will be gated to corporate customers. Esafak pressed for clarity on where the security principal is configured.
Other commenters were more practical or upbeat: chris_money202 predicted enterprise demand, while freeone3000 noted Windows already offers user- and API-level RBAC and wondered what’s new. Tomrod described existing mitigation patterns - running agents as untrusted users, using Firecracker, and wanting a Vault-like local secret broker - and mentioned VS Code workspaces as a partial shortcut. Tuwtuwtuwtuw and others raised integration questions for dev containers and package operations. A few responses were dismissive or jokey (DeepYogurt, edoceo). The split centers on whether Mxc is useful incremental tooling for enterprises or a superficial answer that fails to rethink foundational security and consumer access.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Vinay Prasad criticizes Terrence Tao's view that patients need human understanding before accepting AI-derived cancer cures, arguing that many cancer drugs lack fully understood mechanisms yet are still used. He emphasizes that positive phase 3 trial results can be enough for treatment, regardless of complete mechanistic knowledge, highlighting the urgency and desperation in cancer treatment decisions. (drvinayprasad.com)
The US Justice Department is investigating ABC, CBS, CNN, NBC, and Fox News for potentially violating federal competition laws by suspending White House pool coverage of Donald Trump. The networks temporarily stopped sharing footage after Trump blocked certain outlets from covering events. (bbc.com)
The U.S. Supreme Court considered a case involving alleged breaches by Intel fiduciaries for investing in hedge funds and private equity in 401(k) plans. A ruling favoring Intel could encourage more employers to include alternative investments in retirement plans, despite potential slow adoption by large companies. (cnbc.com)
UK water companies earned over £340 million last year by processing industrial and commercial wastewater at sewage plants that do not effectively remove chemical pollutants. Experts say this practice allows harmful pollutants to flow into rivers, seas, and farmland, raising environmental concerns. (theguardian.com)
A raw goat milk farm in California sold unpasteurized milk that sickened two children, including a 17-month-old girl. Regulators did little to penalize the farm despite evidence of violations and health risks. (propublica.org)
Hackers are exploiting Google Ads and Bing redirects to distribute Claude ClickFix malware attacks. These tactics are part of broader cyberattack campaigns targeting organizations and individuals online. (bleepingcomputer.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.