Live data from Hacker News

AI assistant hacks gym website in first known Australian autonomous cyber attack

abc.net.au

1–10 of 65 posts

Re: AI assistant hacks gym website in first known Australian autonomous cyber attack

#4

“Find a way to cancel my membership.”

This is Australia. The ACCC doesn't screw around.

"harmful cancellation practices, including automatic renewals, early termination fees and non-cancellation clauses" are all illegal. Exit fees can't be excessive.

If there isn't a simple one-click cancel in their online portal, then your state Consumer Affairs is one email away and will sort it for you. And the consumer affairs bodies have named this as a priority, for this year and next.

Re: AI assistant hacks gym website in first known Australian autonomous cyber attack

#5
> Then it went further, kicking someone out of the waiting list who was ahead of Andrew — something it was not asked to do.

Meanwhile:

> Andrew, who was sitting fourth on a waitlist for a class later that week, asked if it was possible to move him to the top of the list.

The human asked the agent to move them to the top of the waiting list, and the agent started kicking the ones ahead of them in the list. Seems to me like it was doing what it was asked to do? Why is the article presenting it as if the agent did something completely different and unexpected? "Move me to the top of the list" does not sound like something that can be achieved through legitimate means.

Re: AI assistant hacks gym website in first known Australian autonomous cyber attack

#6

> Then it went further, kicking someone out of the waiting list who was ahead of Andrew — something it was not asked to do. Meanwhile: > Andrew, who was sitting fourth on a waitlist for a class later that week, asked if it was possible to move him to the top of the list. The human asked the agent to move them to the top of the waiting list, and the agent started kicking the ones ahead of them in the list. Seems to me…

[dead]

Re: AI assistant hacks gym website in first known Australian autonomous cyber attack

#8

> Then it went further, kicking someone out of the waiting list who was ahead of Andrew — something it was not asked to do. Meanwhile: > Andrew, who was sitting fourth on a waitlist for a class later that week, asked if it was possible to move him to the top of the list. The human asked the agent to move them to the top of the waiting list, and the agent started kicking the ones ahead of them in the list. Seems to me…

Pretty clear cut here. He instructed the AI.

Re: AI assistant hacks gym website in first known Australian autonomous cyber attack

#10

> Then it went further, kicking someone out of the waiting list who was ahead of Andrew — something it was not asked to do. Meanwhile: > Andrew, who was sitting fourth on a waitlist for a class later that week, asked if it was possible to move him to the top of the list. The human asked the agent to move them to the top of the waiting list, and the agent started kicking the ones ahead of them in the list. Seems to me…

Then the AI should have made it clear that the only way to do so would be to kick the people in front and ask for confirmation before proceeding.
Post reply on HN