Hacker News: amouat

AI Agents Are Disrupting Open Source Security Disclosure

amouat — Mon, 05 Oct 2026 09:31:43 +0000

Article URL: https://www.infoq.com/news/2026/10/open-source-ai-security/

Comments URL: https://news.ycombinator.com/item?id=49962560

Points: 1

# Comments: 0

New comment by amouat in "Dario, Please"

amouat — Tue, 15 Sep 2026 08:21:48 +0000

Right, you mean it didn't go through a gateway? But would that actually have helped? The requests all went through jfrog didn't they? I guess it depends on the level of filtering at the gateway?

Whilst it might not be JFrog's threat model, I wouldn't assume it can be used as a full internet proxy.

I don't really mean to defend OpenAI here, but they did make some attempts at sandboxing. Although it does seem that they didn't really know what they were doing.

New comment by amouat in "Dario, Please"

amouat — Tue, 15 Sep 2026 07:25:38 +0000

Isn't that exactly what they did? The bots could only access the jfrog instance, so they hacked jfrog?

New comment by amouat in "Being ambitious and being a dad"

amouat — Wed, 19 Aug 2026 12:21:03 +0000

I don't disagree, except that you've taken ambitious to mean climbing the corporate ladder, which is a relatively narrow reading.

It can also mean wanting a achieve a large dream or goal e.g. writing a book.

New comment by amouat in "Fast Remediation Is the New Trust Model (JFrog and OpenAI Zero-Day Findings)"

amouat — Tue, 28 Jul 2026 15:56:10 +0000

Yeah. But it's 10 paragraphs of AI nonsense that barely mentions the actual story.

Who could have thought this was a good idea? It literally reads like "ai security is important, btw we're the reason hugging face got hacked, we're awesome at securing things"

New comment by amouat in "Fast Remediation Is the New Trust Model (JFrog and OpenAI Zero-Day Findings)"

amouat — Tue, 28 Jul 2026 12:57:03 +0000

So they are the proxy in the hugging face hacking incident?

Way to bury that lede.

New comment by amouat in "We all depend on open source. We will defend it together"

amouat — Fri, 26 Jun 2026 14:17:19 +0000

No, not really, and I don't think you need to be snarky.

It may be an industry body, but it runs multiple community conferences and projects which support Open Source. A notable example in this case being the OpenSSF https://openssf.org/

The LF is not perfect, but I would expect them to come from an OSS and community angle on this.

New comment by amouat in "We all depend on open source. We will defend it together"

amouat — Fri, 26 Jun 2026 11:02:32 +0000

My best understanding from reading this is a) where possible and b) where necessary. This is the Linux Foundation, so it must put OSS and community first, surely.

People talk about contributing financially, but how and to what end? Most projects aren't set up to accept or utilise donations. That said, I would say we should be providing all OSS projects with significant access to AI in order to review their codebases and PRs and hopefully relieve some of the maintenance burden. I know there are some initiatives in this area already.

Chainguard's new Athena coalition uses AI to fix open-source flaws

amouat — Tue, 16 Jun 2026 15:53:26 +0000

Article URL: https://www.zdnet.com/article/chainguard-athena-coalition-fixes-open-source-flaws-before-ai-attackers-exploit/

Comments URL: https://news.ycombinator.com/item?id=48557229

Points: 4

# Comments: 0

New comment by amouat in "The most unlikely school bag"

amouat — Fri, 29 May 2026 07:17:25 +0000

I stopped reading in anger at "That’s not an accident; it was the point."

It's pretty disrespectful imo -- it feels like the reader's time is worth less than the author's.

New comment by amouat in "Gonon: Building a Clock with No Numerals"

amouat — Mon, 30 Mar 2026 08:28:43 +0000

That's what I thought, but in the 2nd para:

> No Roman numerals. No Arabic numerals. No left-to-right reading direction. No assumed orientation. Something that works in a mirror, in zero gravity, in any language spoken on Earth or beyond it.

As other comments have pointed out, base 10 is a pretty big assumption though.

New comment by amouat in "Statement from Dario Amodei on our discussions with the Department of War"

amouat — Fri, 27 Feb 2026 22:27:39 +0000

I noted "warfighter" as well. Never heard that before.

New comment by amouat in "Vim-pencil: Rethinking Vim as a tool for writing"

amouat — Mon, 16 Feb 2026 14:48:40 +0000

I played with some of these tools 12 years ago and created "dim", but it was really just Vim with limelight and goyo in a Docker container.

https://github.com/amouat/dim

There is something nice about having the editor as a separate command especially for writing.

New comment by amouat in "A novelist who took on the Italian mafia and lived"

amouat — Sat, 31 Jan 2026 09:30:28 +0000

I assume they just pretend to be the Googlebot so the site just gives the text.

Gastown, and where software is going

amouat — Wed, 21 Jan 2026 11:59:36 +0000

Article URL: https://www.chainguard.dev/unchained/gastown-and-where-software-is-going

Comments URL: https://news.ycombinator.com/item?id=46704439

Points: 3

# Comments: 0

New comment by amouat in "Ask HN: Share your personal website"

amouat — Thu, 15 Jan 2026 16:23:09 +0000

Personal blog: adrianmouat.com

New comment by amouat in "Find a pub that needs you"

amouat — Wed, 14 Jan 2026 18:47:54 +0000

Seems to be England only. No results for Edinburgh.

New comment by amouat in "I Want You to Understand Chicago"

amouat — Sat, 08 Nov 2025 21:17:32 +0000

It's all the same people. If you really don't know, a few of the incidents are here: https://www.bbc.co.uk/news/videos/c6299nrj76yo

New comment by amouat in "MinIO stops distributing free Docker images"

amouat — Thu, 23 Oct 2025 08:30:39 +0000

The ladder is still there! See that pile of wood there? That's where we put the rungs. And if dig in that hole over there you might even find the extension we removed last week...

Chainguard's Series D: Building the Safe Source for All Open Source

amouat — Wed, 23 Apr 2025 15:29:18 +0000

Article URL: https://www.chainguard.dev/unchained/announcing-chainguards-series-d-building-the-safe-source-for-all-open-source

Comments URL: https://news.ycombinator.com/item?id=43773285

Points: 2

# Comments: 0