3 ms·
So is “you can make GET requests, but not POST requests” an actual form of security people use?
by ks2048 15d ago
So is “you can make GET requests, but not POST requests” an actual form of security people use?
- comeonbro 15d agoUnrealistically-naive (...) forms of "sandboxing" might assume that restricting an agent to GET-requests-only will let it retrieve info from the outside world without being able to effect it. Also probably many actually-in-use "Web Fetch" tools are GET-only, though perhaps without counting on that bad assumption.
- NegativeLatency 15d agoYes, there was an OpenAI trial that was using that in combination with a forum to coordinate among agents