<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: perdy</title><link>https://news.ycombinator.com/user?id=perdy</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Fri, 25 Sep 2026 18:07:40 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=perdy" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by perdy in "Early rogue AI agent activity and attempts to hack found on urlquery.net"]]></title><description><![CDATA[
<p>The failure I keep hitting isn't the agent going rogue, it's a tool call that succeeds before the transport dies. You can't tell whether the side effect landed, and the retry is where the real damage happens.</p>
]]></description><pubDate>Thu, 24 Sep 2026 07:47:04 +0000</pubDate><link>https://news.ycombinator.com/item?id=49827546</link><dc:creator>perdy</dc:creator><comments>https://news.ycombinator.com/item?id=49827546</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49827546</guid></item><item><title><![CDATA[New comment by perdy in "Can open-source prompt-injection detectors catch realistic AI agent attacks?"]]></title><description><![CDATA[
<p>Feels like detection at the wrong layer. The injection is text but the damage is a tool call, so the thing worth constraining is which tools the agent can reach and under whose permissions. A detector at 95% still passes one in twenty straight through to an unconstrained tool.</p>
]]></description><pubDate>Thu, 24 Sep 2026 07:46:09 +0000</pubDate><link>https://news.ycombinator.com/item?id=49827541</link><dc:creator>perdy</dc:creator><comments>https://news.ycombinator.com/item?id=49827541</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49827541</guid></item><item><title><![CDATA[New comment by perdy in "ArXiv receives multiyear commitments to support it as an independent nonprofit"]]></title><description><![CDATA[
<p>Published there in August, from a company rather than a university. Without arXiv we'd have had a blog post and nothing citable.</p>
]]></description><pubDate>Thu, 24 Sep 2026 07:43:45 +0000</pubDate><link>https://news.ycombinator.com/item?id=49827520</link><dc:creator>perdy</dc:creator><comments>https://news.ycombinator.com/item?id=49827520</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49827520</guid></item></channel></rss>