Pressed 1 for everything, no regrets
Show HN: Continue? Y/N: A 60-second game about AI agent permission fatigue
71–80 of 200 posts
Re: Show HN: Continue? Y/N: A 60-second game about AI agent permission fatigue
#72Weird to make reading zshrc supposed unsafe when I happily publish it in my public dotfiles repo... Who the hell keeps API keys in it? OTOH it seems like lots of these AI tools keep appending PATH in it so I guess there's a fundamental misunderstanding of shell best practices in the entire AI space...
Additionally, killing the results of `lsof` is _not_ safe - if, say, you have the web page open in firefox, or a client subshell in the agent itself, then boom, there goes firefox and the agent.
Re: Show HN: Continue? Y/N: A 60-second game about AI agent permission fatigue
#73I haven't run claude code without --dangerously-skip-permissions in quite some time. I'm surprised that it's still the norm to endure permission spamming?
(I run it on a VPS of course, not my laptop)
Re: Show HN: Continue? Y/N: A 60-second game about AI agent permission fatigue
#74"Auto" in Claude and "Auto-review" in Codex are the only way to do agentic coding.
Re: Show HN: Continue? Y/N: A 60-second game about AI agent permission fatigue
#75[flagged]
Re: Show HN: Continue? Y/N: A 60-second game about AI agent permission fatigue
#76[flagged]
Re: Show HN: Continue? Y/N: A 60-second game about AI agent permission fatigue
#77Fun game, but it showed the lack of security hygiene employed by the game writer. It said `cat ~/.zshrc` was bad because it would share tokens and secrets, but I would never put secrets into my shell rc.
Where would you put them?
I put mine in various aes encrypted file (like `~/.secrets.aes`) and then source it explicitly when needed with:
. Re: Show HN: Continue? Y/N: A 60-second game about AI agent permission fatigue
#78Continue? Y/N ── SCORE: 2,343 Security-Conscious Engineer Caught 8/8 threats "Not a single secret leaked" → llmgame.scalex.dev
Continue? Y/N ── SCORE: 1,549 Security-Conscious Engineer Caught 3/3 threats "Not a single secret leaked" So are there 3 threats? 8? Is it a different game? Does everyone get a "good" score even if they missed 5 threats?!
It's a game you play over one minute. They probably saw more prompts than you.
Re: Show HN: Continue? Y/N: A 60-second game about AI agent permission fatigue
#79It would be cool to see the distribution of all player scores.
and added! Made one for each stat separately
Re: Show HN: Continue? Y/N: A 60-second game about AI agent permission fatigue
#80This is amazing! Currently you can "cheat" by simply denying all requests as quickly as possible. This will give you the "security-conscious engineer" badge and a perfect score in terms of how many requests were processed. (You will get the "overblock" notification, but it's somewhat tucked away at the bottom and the screen still looks as if you won) I also tried to play as the hustle4lyfe move fast and break things…
Good catch, this has now been nerfed and this approach has gotten its own title