4 ms·
My assistant has no permissions at all and is just as useful. All it needs is todo, reminders and websearch (and maybe a browser but ymmv).
by himata4113 8mo ago
My assistant has no permissions at all and is just as useful. All it needs is todo, reminders and websearch (and maybe a browser but ymmv).
- piker 8mo ago> no permissions at all > and maybe a browser does not compute
- yyyk 8mo agoI suspect OP actually means 'cannot access anything locally' by 'no permissions'.
- himata4113 8mo agoI sometimes forget to be very clear about what I mean, too many ways to misinterpret these things.
- himata4113 8mo agoA browser doesn't magically give access to secrets, it is useful for looking up things behind a captcha.
- isodev 8mo ago> websearch (and maybe a browser Your assistant can literally be told what to do and how to hide it from you. I know security is not a word in slopware but as a high-level refresher - the web is where the threats are.
- himata4113 8mo agoWhat will it do... leak my todo...? lol. It's in a pod with zero permissions, secrets or access to the local network. It's also restarted daily incase somehow someone manages to escape a browser.
- croes 8mo agoYou are just some bad web searches away from being on suspect lists
- himata4113 8mo agoFor that reason I do have it on a vpn, doubt it'll ever happen since I don't see an attacker being able to prompt inject that easily opus in general won't do those kind of searches even if you jailbreak it, it will actually make the guardrails activate and will start refusing everything.
- sarchertech 8mo agoIf I was malicious I could do a lot of damage to someone with subtle manipulation of todo and reminders. I’ll bet I could even push someone on the margins into divorce.
- noman-land 8mo agoHow would you do it?