I minted what I thought was a minimal-permission Github token for a single action, and the agent I gave it to discovered it had more permissions than I thought, and made use of those permissions. Who is trusting these things with write access to their lives?
- AI is sitting on my two personal servers as root with unrestricted access to everything. I task them with deploying stuff, checking and patching security holes, reconfiguring the firewall, etcetera. It literally never failed at anything, didn't go "off the rails", didn't break anything.
- The other day, in order to deploy a fork of Plane.so, I gave an AI an full-permission token to my Coolify, to my Cloudflare account (so it could change DNS and Tunnel settings), and unrestricted SSH access to my server and to my browser via the Playwright Chrome extension. No issues.
- I have AI running unrestricted on my computer doing all kinds of stuff.
I literally never had any issues with this approach. Not a single one. I don't think there's as much of a need for sandboxing as some people would like to believe.
Maybe you’re lucky, or maybe the examples I’ve seen (and experienced) of agent overreach are particularly unlucky. I guess at this point it’s about personal comfort level, and mine doesn’t support that type of unfettered access yet.
God I want the fucking market to crash
Colour me surprised then when I see, since circa 2024, an absolute deluge of AI products coming from these companies, each with their own naming scheme, marketing page, and accompanying hype post, and despite giving them MORE than the 30 second elevator pitch interval, I am left not understanding what it is they want to sell me. I have claude, I have codex, I get my work done just fine with each. I don't need another product for this. Any software these companies try pushing always ends up being something I could've made with their own AI models in a day and then never end up using. What's the end game here? What's the goal? What's the moat? I'm not sold on a single product outside of codex and claude code.
Zuckerberg: Just ask
Zuckerberg: I have over 4,000 emails, pictures, addresses, SNS
[Redacted Friend's Name]: What? How'd you manage that one?
Zuckerberg: People just submitted it.
Zuckerberg: I don't know why.
Zuckerberg: They "trust me"
Zuckerberg: Dumb fucks