3 points, 0 comments on Hacker News
Hook 'em horns - but don't get hooked up in an unexpected tow this Longhorns season.
One-liner: Authentication proves who you are ; Authorization proves what you're allowed to do . JWT and OAuth 2. 0 are the industry standards for doing both at scale.
WinZST is a 7-Zip fork that extracts compressed tar archives directly to their final directory instead of materializing an intermediate `. tar`. In one 11.
A tipped pass ended up in the least likely hands on the field: a referee, who nearly got tackled in the moment during the Hawaii high school game.
Agent 安全攻击面分析：风险图谱与防御实践 随着 LLM Agent 从实验室走向生产环境，其安全问题已经从"理论担忧"变成了"现实风险"。2026年，多起 Agent 系统被攻击或滥用的案例表明： Agent 的能力越强，攻击面越大 。本文系统梳理当前 Agent 系统的核心攻击面，提供可操作的防御建议。 一、为什么 Agent 系统攻击面比普通 LLM 大得多？ 传统 LLM 的交互模式是"输入 → 输出"，攻击面相对集中（Prompt 注入、Jailbreak 等）。但 Agent 系统引入了几个新维度： 多步推理与工具调用 ：Agent 需要调用外部工具（搜索、代码执行、AP...