3 ms·
I agree it's a bad idea. My question is how the presence of "AI" changes the security model. The root cause of the problem is hooking up untrusted input to a pr
by qsort 4y ago
I agree it's a bad idea. My question is how the presence of "AI" changes the security model. The root cause of the problem is hooking up untrusted input to a privileged endpoint. How is "AI" different from any other source of untrusted input?
- mannykannot 4y agoIt does not change the security model. The point in this thread is just that, under any security model, it is a bad idea.
- distcs 4y agoNo, the point of the thread is if there is anything in the article that is specific to AI. It is not. The concern about hooking up the output of a program to external systems is a general security concern related to any software: AI or not. The point of qsort's comment was that the article does and the comment by OP does not explain how this concern is specifically about AI.
- mannykannot 4y agoThere is no claim in the original post that there is a special rule for AI as opposed to any other similarly-capable agent. The reasonably well-founded concern here (and in the article) is that someone might well want to create an exception for AI, either knowingly, or by default because they cannot see or properly evaluate the risk.