‹ BackHN Continuity

Thread

Humans missed 1 in 3 threats approving AI agent commands across 40k game runs

220 points · 178 comments · Wirbelwind

  1. wmanley · · focus · HN ↗
    The agent should ask whether it's allowed to read/write particular files, rather than whether it's allowed to run particular commands. It would be much easier to review. Then wrap each command invocation in bwrap (+http proxy) accordingly.
    1. carljungslabtek · · focus · HN ↗
      I’ve even had plenty of situations where the command was so long that it gets truncated. Maybe my screen wasn’t big enough but as far as I could tell it wasn’t possible to read the whole thing. “Send it, claude!!”
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.