13 ms·
They don't need to have access to your accounts. You can give them their own accounts.
by mike_hearn 2mo ago
They don't need to have access to your accounts. You can give them their own accounts.
- FuckButtons 2mo agoSure, but then what’s the use of them? Sounds like a very expensive tamagotchi.
- napoleond 2mo agoDo your colleagues at work have access to all of your own accounts, or are they expensive tamagotchis?
- FuckButtons 2mo agoI trust that my colleagues are not going to do stupid things with their accounts, I cannot say the same for agents, and making their own accounts that you’re still responsible for seems like you’ve just moved the problem rather than actually resolving it, since ultimately, you’re still responsible for their actions.
- PhunkyPhil 2mo agoAre agentic systems like these making correct decisions more often than humans really unthinkable? A comment like what you just wrote was unimaginable 5 years ago
- shikshake 2mo agoHumans can take accountability for mistakes, and there are systems in place to help you if they don’t.
- rsalus 2mo agoI imagine the same systems will evolve for agents as well, if nothing else because lack of trust will impact provider's bottom line.
- FuckButtons 2mo agoThe power imbalance will ensure that this is unlikely to happen, in much the same way that people generally don’t trust that massive corporate entities have their best interest at heart but might have some regard for their colleagues wellbeing.
- darkwater 2mo agoHow so? Each human is a different "model", and its constrained to the physical world. What are we going to do? Put whole corporations in jail, shareholders included? Limit what they can do? The "it went sideways" scenario for 100k agents spawned across the world using the same bad model is completely different from humans going sideways.
- xdertz 2mo agowhen my colleagues do something illegal or negligent they are personally on the hook for it. Who is on the hook when my bot does that?
- pjc50 2mo agoWork environments usually already have strict controls on financial accounts for very obvious reasons. This does result in stupid "why do I need director approval to buy a stapler?" stories, but the alternative risks all sorts of internal and external frauds. (a notable achievement of SaaS and now AI has been to totally circumvent spending controls. You might not be able to spend $10 on a USB cable without a purchase order, but you can run up an AI bill of arbitrary size and in some places are encouraged to!)
- mike_hearn 2mo agoYou just give them the permissions they need to do their work. This approach exploits the fact that managing permissions for humans is a very old requirement and most platforms have good support for it already. You can then issue API keys from the agent's accounts if you want to restrict permissions further.
- mvdtnz 2mo agoHow do I give an agent its own bank account credentials in a way it can interact with my accounts? How do I give an agent access to my inbox with its own account? How do I get it to interact with my Youtube subscriptions with its own account? What is the use of an agent with its own accounts that are separate to my accounts? What am I even getting out of it at that point?
- walrus01 2mo agoThey're nowhere near smart enough, but in an ideal case, the same utility you would get out of hiring a $600 a month personal assistant with a basic desktop PC who lives in a developing country somewhere on the other side of the planet and speaks reasonably good English. If the AI/LLM is good enough (they're not, yet), the same level of access/credentials/logins that you would give to an entirely new real person.
- dgellow 2mo agoSo, you mean that it will run its own AI agent, which itself also has its own computer, which will be used to run its own agent, which so has its own computer…
- sebastiennight 2mo agoI'm 100% sure my (human) executive assistant can be tricked into mistakes with the appropriate phishing or social engineering, however the scope of tactics that can be employed for it seems limited to way fewer dimensions (eg, clear text email, maybe phone calls) vs the scope of prompt injections that could harm an equivalent AI assistant (which could include any hidden instructions in "invisible" text in emails, webpages, PDFs, screenshots, attachments and much more).
- yellow_postit 2mo agoThis is the growing pain of any “employer” and I suspect lots of startups and features coming to fill the void. Start with a shared credit card. Then company credit cards. Then you layer in spend controls. Now repeat but for “agents”. Whether this is more near term inefficiency to drive output side actual efficiency remains to be seen. But great if you’re selling tokens!
- devin 2mo agoPeople were saying this to me back in the early days with OpenClaw. They lack imagination. The downside here is not "oops it accidentally leaked the credentials to my agent email account", it is "oops it was duped into something illegal and now I'm on the hook for it".