logoalt Hacker News

FooBarWidgetyesterday at 5:41 PM1 replyview on HN

How do you have any kind of trust in these tools? They always feel like one prompt injection away, or one over eager agent away ("I'll lookup a forgotten credential in an email to ssh into a server to hack a system in order to fulfill your request"), from disaster. I don't trust any AI session unless I carefully select the exact files they have access to. No way do I dare sharing my entire mailbox.


Replies

FooBarWidgettoday at 8:29 AM

Very weird for this to be downvoted. It's a legitimate concern. It's also a legitimate question: where do you get your trust from? Do you have guardrails? Or is it really just blind trust?