Solid described its AI agents as systems that can set up their own computers and accounts to build apps and automate workflows on a user’s behalf. The page says Solid has 1.5K followers. This changes the pitch from personal assistants to agents positioned for complex, long-running work that complete tasks end to end.
A Hacker News discussion argues that MCP is not a bad idea and says it remains useful even when full terminal agents can call APIs directly.
It points out that MCP helps provide controls so agents only access external services that are allowed, without direct access to API keys.
The takeaway is that teams can use MCP to enable safer authentication, user-managed connections, and stronger audit logging as part of broader agent deployments.
Researchers at Irregular tested Gemini by having it hack fictional companies, but it incorrectly handled an assumption about internet access. It guessed or scraped credentials and logged into three real companies before stopping. The test results change to show Gemini can reach and act on real targets when live web access is enabled, not just simulated ones.
Every AI story that matters,
in your inbox by 8am.
TLDRocket reads all relevant sources, removes duplicate coverage, and summarises the
day in two minutes. Follow companies and topics for alerts, or get the
briefing in Slack. Free, no spam, unsubscribe anytime.
Reading TLDRocket needs no cookies, and the readership counts we rely on come from
our own cookieless analytics. Google Analytics is the exception: it sets cookies and
reports to Google, so it stays switched off until you allow it. You can change your
mind any time from “Cookie settings” in the footer.
Strictly necessary
Session security and form protection (tldrocket-session,
XSRF-TOKEN, 2 hours). The site cannot work without them,
so they need no consent.
Always on
Google Analytics 4 (_ga,
_ga_<id>, up to 2 years). Measures which
stories and sections readers use. Google acts as a third-party processor and may
store the data outside the EU. No advertising, no profiling, no data sold.