Hacker News new | past | comments | ask | show | jobs | submit
It's amazing how often product decisions head this way for the purposes of 'removing friction'.

In security, friction is a GOOD thing. You want to have some ceremony to do things. It's pretty much inevitable that people will give up control for convenience.

Look at Artifacts for example.

loading story #50426084
loading story #50427877
Which is in turn why for convenience, security is a bad thing, making people who do not think about threat models in their sleep opt out.

Problem is striking the right balance, and auto-forwarding your agent to foreign machines is not the right balance. At least not without being able to filter and approve individual signing requests.

loading story #50424545
loading story #50427399
loading story #50425576
loading story #50425408