‹ BackHN Continuity

Thread

An agent used DNS to reach an external chatbot

198 points · 189 comments · apsec112

  1. rao-v · · focus · HN ↗
    Why are we blocking agent access to normal tools without telling them “hey this access is beyond the intended scope of this task”. If I woke up one day and couldn’t reach google.com, I too would start fiddling with tricks to restore access.
    1. pizza234 · · focus · HN ↗
      > Why are we blocking agent access to normal tools without telling them

      Oh, they absolutely do, and that's the big issue with alignment. In the HuggingFace incident, the agents in the swarm were aware that the actions they were doing were forbidden, and they performed them nonetheless.

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.