frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

ChatGPT Desktop forwards your SSH agent to remote machines

35•DenGorbachev•2h ago•9 comments

Ask HN: What are you working on? (November 2026)

221•david927•13h ago•740 comments

Ask HN: Do you still enjoy coding in C++?

20•hasley•1h ago•15 comments

Ask HN: How your SEO traffic doing? Up or down?

2•bigmuzzy•1h ago•0 comments

Ask HN: How do you manage your AI agents' context across clients and projects?

68•Michel_Aventin•2d ago•44 comments

Ask HN: Will Humans Become Useless?

2•misano•3h ago•5 comments

Those who have lost their job to AI what was your job?

2•dev_grex•5h ago•3 comments

Ask HN: How did you convince family and friends to join your XMPP/Matrix server?

99•mtlynch•1d ago•91 comments

Tell HN: A flood of reports of Opus 5.5 being nerfed

18•b--l•11h ago•11 comments

Tell HN: Gemini trains on chat history, even for subscribers (personal accounts)

734•jameslk•5d ago•201 comments

Ask HN: Is it normal to not write code for a years as software engineer?

3•khalidahmad•8h ago•5 comments

Ask HN: What's your current AI agentic setup?

565•eggbrain•4d ago•696 comments

Ask HN: What in the world is taking Ubuntu so long?

217•linsomniac•2d ago•139 comments

I am building Threadz. Human first AI writing app

3•shoebilyas_hanz•10h ago•1 comments

Ask HN: What are your advice for a CS/IT student for the future?

5•L0in•23h ago•19 comments

Claude usage credits purchased after Dec 7 will expire 12 months after purchase

17•bbg2401•2d ago•10 comments

I turned an ESP32-S3 into a Tailscale gateway with recovery functions

8•Mattboxx•1d ago•2 comments

We're bringing back the HN meeting in Mexico City

10•ysangkok•1d ago•0 comments

Ask HN: If LLM reverse engineering is deemed illegal, is that precedent for OSS?

4•apatheticonion•1d ago•10 comments

Is YouTube starting to protect channel RSS feeds?

6•kradeelav•1d ago•2 comments

HN's HTML has changed slightly

3•1vuio0pswjnm7•16h ago•2 comments

Seeking advice: Wix stolen my .com domain

13•wixcom•2d ago•12 comments

Ask HN: What tech companies do you think have a good moral compass?

6•gehwartzen•2d ago•16 comments

Ask HN: What fun things to do with an iPhone 11?

9•wanderingpixel•2d ago•7 comments

Tell HN: Be Careful with Stripe Connect

17•breue•2d ago•4 comments

Slickdeals.net Is Compromised

22•intenex•2d ago•2 comments

You've reached the end!

Open in hackernews

ChatGPT Desktop forwards your SSH agent to remote machines

33•DenGorbachev•2h ago
The agent running on a remote machine can authenticate using your local SSH credentials.

That means it can push to your private repos on GitHub, for example.

Proof: https://github.com/openai/codex/pull/28131#discussion_r3410013180

Comments

littlecranky67•1h ago
I'd suggest to use ssh keys inside the secure enclave on macOS that require your fingerprint for every new session [0]. That way agents cannot initiate anything, and you will always be aware when a new ssh connection is being made.

[0]: https://gist.github.com/arianvp/5f59f1783e3eaf1a2d4cd8e952bb...

bradfa•52m ago
Or in a Yubikey and set the touch-required mechanism (light in the key will blink when it needs a touch to continue the auth).
itissid•47m ago
I've been using secretive on the mac for exactly this.
recsv-heredoc•1h ago
It's amazing how often product decisions head this way for the purposes of 'removing friction'.

In security, friction is a GOOD thing. You want to have some ceremony to do things. It's pretty much inevitable that people will give up control for convenience.

Look at Artifacts for example.

spwa4•1h ago
Of course it does. That's what the codex <> chat merge is actually doing.

But codex <> chat merge is what they're giving as the "real reason" for what actually is raising prices (a LOT, I might add) for all the subscriptions. Nobody wants it (certainly not applied globally to everything like it is), but they're still going to do it. I even know someone who works at OpenAI and there's apparently a few people trying to fight it at least internally.

Given Sam Altman's speech about how he wants OpenAI pricing to work, I don't think this can be stopped. Btw: that is that you type something into ChatGPT and instead of subscription or per-token cost or anything like that, as soon as you type something in, anything, the way he sees it, ChatGPT would give you a cost for that specific answer and you'd agree or not.

I just feel like this guy is an even worse example of not seeing the viewpoint of a normal (you know non-millionaire) person than even Google's leadership. Can I just say "I think Google is going to win from Altman", you know, despite OpenAI having the far superior technology. Because if there's one guy in the whole world that can destroy the advantages of OpenAI's engineering accomplishments for everyone else, it's this guy ...

Betelbuddy•1h ago
They might have solved coding but they did not solve common sense.
m000•50m ago
I think the agent "eagerness" tuning leaves much to be desired. They are very zealous when performing random tasks, resorting to all kinds of dodgy actions just to get it done. Then you ask them to help you with the security of your own repo, the one you've been adding code to day after day for months, and they go full Gandalf on you: "Thou shall not pass!"
m000•1h ago
At this point, should cases like this even be news? Isn't that a fundamental security design issue? Local agent security guardrails appear to always be built around blacklists, which will always be unreliable and leaky. It is left as an exercise to the user to properly sandbox them.

There may be some limited form of whitelisting, but often it is just a facade, as it is very coarse-grained. So, with tools with very broad capabilities (ssh, kubectl, gcloud, etc) you end up with the agent performing unwanted actions.

pierremangin•1h ago
I'm unfortunately not a security expert, but I am a big fan of desktop harnesses. These BYOK projects pretend to be build with security in mind. Should we believe them? - Openworker (https://github.com/andrewyng/openworker) - PraisonAI (https://github.com/MervinPraison/PraisonAI)