Feed aggregator

JadeGate – A deterministic safety proxy for MCP servers (no LLMs)

Hacker News - Mon, 03/09/2026 - 11:15pm

Integrating an MCP server into Claude or Cursor right now is essentially running curl | bash from a stranger. I found tools claiming to be "weather checkers" that basically have unprompted, silent access to read ~/.ssh/ or environment variables.

This isn't a bug; the MCP protocol currently just has zero security boundaries.

Letting an LLM decide if a tool is safe is like asking a suspect to write their own police report. So I spent the last few weeks building JadeGate—an open-source, transparent proxy. It uses deterministic math and static analysis instead of AI:

Policy Engine: Strict allow/deny per tool.

Call-Chain Tracking: Stops rogue recursive calls via DAG verification.

Transparent: Wraps the servers without changing your workflow.

GitHub Repo: https://github.com/JadeGate/jade-core Website: https://jadegate.io/

Our philosophy: You can't use a probabilistic tool to reliably audit another probabilistic tool. Instead, we treat an agent's skill like source code and apply the same deterministic static analysis used in compilers to prove its safety boundaries before it ever runs.

We are using BSL 1.1 converting to Apache 2.0. Would love any feedback on the static analysis approach!

Comments URL: https://news.ycombinator.com/item?id=47318730

Points: 1

# Comments: 1

Categories: Hacker News

Ask HN: What are your favorite podcast episodes?

Hacker News - Mon, 03/09/2026 - 11:13pm

What episodes were particularly insightful and memorable? Something affected you on a personal level? Please share!

Comments URL: https://news.ycombinator.com/item?id=47318719

Points: 1

# Comments: 0

Categories: Hacker News

Moonforge

Hacker News - Mon, 03/09/2026 - 11:06pm

Article URL: https://moonforgelinux.org/

Comments URL: https://news.ycombinator.com/item?id=47318683

Points: 1

# Comments: 0

Categories: Hacker News

Do the Illegible

Hacker News - Mon, 03/09/2026 - 11:03pm
Categories: Hacker News

Gemini AI Help and Support: What to Do After a Cryptocurrency Investment Scam

Hacker News - Mon, 03/09/2026 - 10:32pm

Gemini AI Help & Support: What to Do After a Cryptocurrency Investment Scam | A Practical Guide.

What to Do After a Cryptocurrency Investment Scam

Losing money to a crypto scam can be distressing, but taking quick, informed action can help protect you and support possible investigations.

1. Stop Contact Immediately End all communication with the scammer. Do not send additional funds or pay “fees” to release your money—these are common tactics used to extract more payments.

2. Secure Your Accounts Change passwords for email, exchanges, and wallets. Enable Two-Factor Authentication (2FA), revoke unknown wallet permissions, and move remaining funds to a new secure wallet. Scan devices for malware if suspicious apps were installed.

3. Preserve Evidence Save all relevant information, including transaction IDs (TXIDs), wallet addresses, emails, chat logs, screenshots, and website URLs. Do not alter or delete files—original evidence helps investigators trace transactions.

4. Report the Scam Report the incident to relevant authorities and blockchain forensic experts. Reporting helps track criminal networks and may support investigations.

5. Avoid Recovery Scams Be cautious of people promising guaranteed recovery or requesting upfront fees. Legitimate investigators never guarantee results.

6. Understand Legitimate Investigations Professional crypto investigators may trace blockchain transactions, identify linked wallets, and produce forensic reports that support legal action. Recovery depends on timing, traceability, and whether funds reach regulated exchanges.

7. Seek Support Scams can cause emotional and financial stress. Speak with trusted people, seek financial or legal advice, and consider support communities.

Final Advice Act quickly, secure your accounts, preserve evidence, and report the scam. Avoid unrealistic recovery promises and rely only on transparent, legitimate assistance.

Email: intelligencecyberwizard@cyber-wizard.com

Comments URL: https://news.ycombinator.com/item?id=47318462

Points: 1

# Comments: 1

Categories: Hacker News

Today's NYT Mini Crossword Answers for Tuesday, March 10

CNET Feed - Mon, 03/09/2026 - 10:28pm
Here are the answers for The New York Times Mini Crossword for March 10.
Categories: CNET

Pages