Hacker News: ryanascend

New comment by ryanascend in "Launch HN: Agent37 (YC F26) – Low-cost agent sandboxes for running agents"

ryanascend — Tue, 13 Oct 2026 16:02:55 +0000

This matches what I ended up doing with my own agent setups. The agent never gets a key that can move money out. I fund a separate wallet, the agent gets delegated spending that I can revoke, and withdrawing is just not something it is able to do. Same idea with an API key I use for automation at work: it can edit and reject drafts, but publishing comes back as a 403 and stays a human click. The thing I worried about was never the agent breaking out of a box. It was the agent doing something allowed but dumb with a grant that was too broad.

New comment by ryanascend in "Tell HN: GitHub refuses to remove cracked copies of my software after a month"

ryanascend — Wed, 07 Oct 2026 16:56:00 +0000

I'm a solo dev who just shipped my first iPhone app, and reading this is a good reminder of why I went the App Store route. My code ships as a compiled binary, so there's no source for anyone to copy and republish. I pay Apple's cut and complain about review delays like everyone else, but never having to file a DMCA takedown against someone reselling my own work is worth it.

New comment by ryanascend in "Apple and a hacker's future"

ryanascend — Mon, 05 Oct 2026 20:12:56 +0000

I hit this from the headless side. I run everything on a Mac mini over SSH, and TCC prompts are invisible there too. Agents spin up new binaries that trip fresh permission prompts with no way to pre-approve them, so you either babysit screen sharing to click OK or leave screen sharing on, which is exactly the exposure that got the author here. The permission model assumes a person sitting at the keyboard, and it falls apart the moment the Mac is a server.