Feed aggregator

Ask HN: Has anyone solved P2P routing at 100B+ nodes without DHT degradation?

Hacker News - Tue, 08/04/2026 - 6:33am

The two of us (PhD in Physics and Mathematics and Philosophical Anthropology) have spent many years working on a mathematically protected secret voting system suitable for making socially significant decisions. During the design process, we realized that such a system must be a peer-to-peer network satisfying six absolute requirements. We have not been able to find a single existing protocol or academic paper that simultaneously satisfies more than two of them: First: anonymous user authentication that guarantees the uniqueness of the user's representation in the network (preventing one person from creating multiple accounts) without storing their personal data and without using any external resources, such as certificate authorities or a trusted third party. Second: a network providing such anonymous authentication must be capable of covering all inhabitants of the Earth. Currently that is just over 8 billion people, but this number grows by more than 100 million every year. Moreover, the deceased must not be excluded from the system, which means monotonic growth is endless. Third: a network that guarantees anonymity must not have any distinguished nodes—that is, it must be strictly peer-to-peer, consisting of nodes formed by users' devices. However, each user may have not one but several devices, and devices can fail, get lost, become obsolete, or even simply go out of fashion. This immediately changes the scale of the network—it must handle hundreds of billions of nodes. Fourth: it is necessary to provide each user with access to their account from any device without using passwords, tokens, seed phrases, or anything similar. Fifth: the key requirement becomes performing a search that enables user recognition in less than 1 second (so that it is imperceptible to the user). That is, any device must locate any other device or data in less than 1 second, while the amount of routing information stored by a single device must be negligibly small, preferably under 100 KB. Sixth: to guarantee data preservation on unreliable user devices, first, the replication factor must be ~100 or even ~1000x, and second, there must be verification and recovery of routing and data based on consensus without a central arbiter or trusted nodes. At the same time, background synchronization traffic must remain below a few hundred bytes/sec per device to avoid overwhelming mobile data plans. Our question to HN: Is the community aware of any existing P2P protocol, DHT, or academic proposal that even attempts to simultaneously satisfy these constraints? We have studied Kademlia, Chord, BATMAN, GNUnet, I2P, etc., and all of them seem to fail at scalability or traffic efficiency. Are we missing something fundamental, or is this truly a blind spot? (This question is motivated by the fact that we have developed a candidate architecture that, in our opinion, solves all six problems. A brief description can be found on our GitHub [https://github.com/ikhrabry-spec/A-P2P-Network-Architecture-for-100B-Nodes]. Patent applications have been filed, and one patent has been granted. However, we doubt the novelty of our solutions and the absence of analogues—please point us to anything we may have missed.)

Comments URL: https://news.ycombinator.com/item?id=49166652

Points: 2

# Comments: 0

Categories: Hacker News

Authorised payment fraud has moved way beyond being a consumer protection issue, says the Royal United Services Institute

Computer Weekly Feed - Tue, 08/04/2026 - 6:06am
Authorised payment fraud has moved way beyond being a consumer protection issue, says the Royal United Services Institute
Categories: Computer Weekly

The UK government went through a whole parliamentary term without consideration of AI legislation - will a new prime minister take a different approach?

Computer Weekly Feed - Tue, 08/04/2026 - 6:06am
The UK government went through a whole parliamentary term without consideration of AI legislation - will a new prime minister take a different approach?
Categories: Computer Weekly

Apple has filed another legal complaint over a secret Home Office order requiring the supplier to provide access to encrypted iCloud data stored by UK customers

Computer Weekly Feed - Tue, 08/04/2026 - 6:06am
Apple has filed another legal complaint over a secret Home Office order requiring the supplier to provide access to encrypted iCloud data stored by UK customers
Categories: Computer Weekly

Decades-Old BMC Vulnerability Exposes Thousands of Data Centers to Attacks

Security Week - Tue, 08/04/2026 - 5:56am

Over 24,000 internet-accessible server-management interfaces disclose authentication hashes before login.

The post Decades-Old BMC Vulnerability Exposes Thousands of Data Centers to Attacks appeared first on SecurityWeek.

Categories: SecurityWeek

AI Appliances: AI Agents and Agencies in YAML

Hacker News - Tue, 08/04/2026 - 5:47am

Article URL: https://leanpub.com/kdeps

Comments URL: https://news.ycombinator.com/item?id=49166297

Points: 1

# Comments: 0

Categories: Hacker News

Show HN: Clawx – A package manager where packages are agent tasks

Hacker News - Tue, 08/04/2026 - 5:45am

Hi HN — I built Clawx, an experiment in treating agent-driven tasks as installable packages.

A Clawx package is a Markdown file with YAML metadata. The Markdown body becomes the system prompt for an agent CLI such as Claude Code, Codex, OpenCode, Gemini, or Antigravity. Clawx fetches the package from a registry, verifies its SHA-256 hash, shows what it is requesting permission to do, asks for approval, runs it, and records the execution.

The idea came from repeatedly writing the same operational prompts: configure CI, inspect a repository, install and verify a tool, scaffold project conventions, or apply a multi-step migration. Shell scripts are deterministic but often brittle across projects. Raw prompts are adaptable but easy to lose, change silently, or execute without much structure. I wanted to explore a point between those two.

Packages can declare parameters, dependencies, required environment variables, and allowed tools. Registries can be Git repositories or small HTTP servers. There is also an offline workspace scanner that looks at manifests and infrastructure files and recommends relevant packages.

One important limitation: tool restrictions are enforced by Clawx at the subprocess boundary when using Claude Code. For the other providers, the declared tools are currently shown during approval, but enforcement depends on that provider’s own sandbox and permission model. I do not want to imply a stronger security boundary than the implementation provides.

You can install it on macOS or Linux with:

``` curl -fsSL https://raw.githubusercontent.com/debarshibasak/clawx/master... | sh ```

Then, assuming one of the supported agent CLIs is installed:

``` clawx list clawx info gitignore-gen clawx run gitignore-gen clawx history ```

The project is written in Go and is still early. I’m particularly interested in feedback on whether agent tasks are useful as “packages,” what the trust model should look like, and where this abstraction breaks down compared with scripts, configuration management, or provider-specific skills.

Comments URL: https://news.ycombinator.com/item?id=49166289

Points: 1

# Comments: 0

Categories: Hacker News

ZeroLeaks: Automated red teaming for AI agents

Hacker News - Tue, 08/04/2026 - 5:40am

Article URL: https://zeroleaks.ai

Comments URL: https://news.ycombinator.com/item?id=49166257

Points: 1

# Comments: 0

Categories: Hacker News

Pages