Hacker News new | past | comments | ask | show | jobs | submit
It’s a completion-machine.

Not an omniscient personal assistant.

They haven’t piled enough gates on top of that initial technological hole yet.

Most human personal assistants are equally vulnerable to this prompt injection.
Yeah, anyone who has had to manage developers in a big company will be able to tell you that it is a constant struggle between giving them freedom to work independently and get things done vs. limiting their access to prevent potential bad stuff from happening. In practice, the more bad stuff happens (and the more consultants you allow in), the more hurdles are introduced. Eventually even trivial tasks become a corporate nightmare of approvals. You can't have the conveniences of both work philosophies at the same time. Even the smartest AI agents won't change that fact. It simply limits their work speed to the speed of the approval process.
loading story #50390603
loading story #50390804
loading story #50390988
loading story #50393960
I have, never in my career, had any of my coworkers deanonymize my browsing or leak my email address everywhere on the internet. Your copy-pasted, thought-terminating argument doesn't work here.
loading story #50395628
loading story #50390628
loading story #50390884
They actually aren't. There is ambiguity on what the proper email to use is.
Most human personal assistants don't have access to vast swathes of private data that they collected without permission, unless your house is the site of multiple watergates
Wait, are you saying Claude isn't conscious on the internet, sir?
You're dehumanizing Claude, sir. That's against Anthropic's updated ToS!
Please look up the research area "alignment."