Live data from Hacker News

Kitesurf: Agent-first browser that runs in V8 isolates

blog.cloudflare.com

11–20 of 68 posts

Re: Kitesurf: Agent-first browser that runs in V8 isolates

#12

Can someone give me examples of where you use agents in your browser? I’ve heard executive leaders tout that “people use agents to buy things for them” but I haven’t actually seen that.

I would use them to solve captchas if that was a thing.

Re: Kitesurf: Agent-first browser that runs in V8 isolates

#13
post #6

Earlier quoted context omitted.

any plans to support webdriver bidi for automation? (i'd be happy to help!) [edit: for others reading who don't usually nerd out on browser automation protocols: webdriver bidi is the new-ish w3c cross-browser standard inspired by CDP - the main magic was the upgrade to websockets and also to standardize the capture of network-level traffic. there are still feature gaps between CDP and BiDi (in spec and implementatio…

> Long term, i believe we should bet on web standards, not proprietary protocols controlled by one company. Totally agree. Not sure if you're involved in the development / spec process for WebDriver Bidi, but the big limitation atm is that it has almost no support for the devtool inspection use cases served by the Chrome Devtools Protocol (CDP) and the Firefox Devtools Protocol (FDP). The Servo and Ladybird browsers…

thanks for the extra context. i'm friendly with devs working on the protocol, but looking for ways to get them more support.

Re: Kitesurf: Agent-first browser that runs in V8 isolates

#14

Can someone give me examples of where you use agents in your browser? I’ve heard executive leaders tout that “people use agents to buy things for them” but I haven’t actually seen that.

i've been tempted to use an agent to help me find non-horrible seats to see the 70mm imax version of the odyssey. but that's also the kind of thing that is heavily guarded by anti-bot detectors.

Re: Kitesurf: Agent-first browser that runs in V8 isolates

#15

Can someone give me examples of where you use agents in your browser? I’ve heard executive leaders tout that “people use agents to buy things for them” but I haven’t actually seen that.

> I’ve heard executive leaders tout that “people use agents to buy things for them” but I haven’t actually seen that.

My wife really dislikes building up the shopping cart for our weekly grocery delivery, so I built an agent... thing with earendil's npm libs. It takes the menu my wife has decided on, confers with her about the ingredients (if it hasn't seen a recipe before), and then uses Chrome's devtools protocol to head to Walmart and add everything to the shopping cart.

It works fairly well and uses the local models I have running on my Mac Studio.

Re: Kitesurf: Agent-first browser that runs in V8 isolates

#16
post #12

Can someone give me examples of where you use agents in your browser? I’ve heard executive leaders tout that “people use agents to buy things for them” but I haven’t actually seen that.

I would use them to solve captchas if that was a thing.

lol

Re: Kitesurf: Agent-first browser that runs in V8 isolates

#18

Can someone give me examples of where you use agents in your browser? I’ve heard executive leaders tout that “people use agents to buy things for them” but I haven’t actually seen that.

I often use it to browse sites to get web/app design inspiration, then make moodboards based off it and send it to me. saves me a lot of manual browsing time

Re: Kitesurf: Agent-first browser that runs in V8 isolates

#19
Bit surprised nobody's mentioned the security side. The V8 isolate guards the wrong half of this imo. It stops the agent's code from escaping the sandbox, but the risky part of a browser agent isn't code escaping, it's that it reads untrusted pages and then acts on them. A prompt injection on a page doesn't need to break out of V8, it just tells the agent to use its normal tools to do something you didn't intend. So the isolate bounds what it can run, not what it can be talked into doing. How does Kitesurf scope that part, ie what can the agent actually reach and send after it loads a hostile page?
Post reply on HN