Hacker News: Front Page

Deus Ex

cybersoyuz — Fri, 06 Nov 2026 15:44:36 +0000

Article URL: https://www.filfre.net/2026/11/deus-ex/

Comments URL: https://news.ycombinator.com/item?id=50393758

Points: 36

# Comments: 7

Show HN: Agentic Identity Broker, OAuth Delegation for AI Agents

jbspeakr — Fri, 06 Nov 2026 15:07:47 +0000

Hi HN, I’m Jan. I am co-author of the Agentic Identity Broker (AIB), an MIT-licensed OAuth2 broker in the Zalando Incubator, that lets a user give an AI agent scoped, revocable access to MCP services.

The broker solves three major challenges that are especially relevant in corporate environments: (A) Enable users to delegate workloads to agents without providing the agents all the user’s tokens. (B) Connect fragmented identity and authorization systems. (C) Centralize tool approvals and audit logging.

We built AIB to fill an infrastructure gap in our own agent platform. At this moment in time, IETF working groups are still finalizing standards for agent identity, and vendors are still turning the necessary infrastructure into off-the-shelf products. We needed that infrastructure today.

How it works: the user consents once per agent and service. The broker stores the third-party tokens encrypted. At request time a gateway (e.g. Agentgateway) does RFC 8693 token exchange. Agents never see user tokens and MCP servers only implement tools and don’t need to care about all the OAuth 2.1 plumbing.

AIB is v0.1 and runs in production, bringing together hundreds of our agents with dozens of internal and external MCP servers.

To try it locally: clone the repo, run "just compose-up-detached".

The current features focus on on-behalf-of (OBO) use cases, where human actors delegate to agents. Next we are looking to also support headless agents, where agents are invoked by machines. Intent-based authorization is yet another package on our roadmap. If you’ve built either, or have feedback on the UI/UX, I’d like to hear from you!

Comments URL: https://news.ycombinator.com/item?id=50393235

Points: 3

# Comments: 0

FAA Begins Retiring Decades Old Floppy Disks from Air Traffic Control

pseudolus — Fri, 06 Nov 2026 15:03:24 +0000

Article URL: https://www.faa.gov/newsroom/trumps-transportation-secretary-sean-p-duffy-begins-retiring-decades-old-floppy-disks-air

Comments URL: https://news.ycombinator.com/item?id=50393183

Points: 31

# Comments: 23

Where Each U.S. State Gets Its Tax Revenue From

peter_d_sherman — Fri, 06 Nov 2026 15:02:07 +0000

Article URL: https://www.visualcapitalist.com/where-each-states-tax-revenue-comes-from/

Comments URL: https://news.ycombinator.com/item?id=50393165

Points: 19

# Comments: 5

RIP Cybertruck. You Were Unloved, Unwanted, and Utterly Absurd

voxadam — Fri, 06 Nov 2026 15:01:38 +0000

Article URL: https://www.wired.com/story/rip-cybertruck-you-were-unloved-unwanted-and-utterly-absurd/

Comments URL: https://news.ycombinator.com/item?id=50393154

Points: 112

# Comments: 98

Ask HN: What in the world is taking Ubuntu so long?

linsomniac — Fri, 06 Nov 2026 14:58:33 +0000

Ubuntu has CVE-2026-98432 marked as a 9.8, but yet it's coming up on a week with no update to fix it. It's still marked as "work in progress" (though at least now they've listed a mitigation):

https://ubuntu.com/security/CVE-2026-98432

I've had mitigations in place for a week, but this response is really shaking my confidence in Ubuntu. I'm just trying to understand what is going on with Ubuntu. Do they have too many kernels (that page is loooong), do they not have enough automation in the build/test pipeline, are their engineers overwhelmed?

We are moving into a world where there are going to be vastly more security issues; if you can't keep up now, where are you going to be in the next 6 months?

For a long time keeping on top of OS updates has been a huge part of keeping the attackers at bay. However, the world is changing.

Comments URL: https://news.ycombinator.com/item?id=50393105

Points: 46

# Comments: 15