21–30 of 334 posts
Earlier quoted context omitted.
That's why I won't download that tool.
Honestly, you're missing out. The productivity gains I've had with these tools is unbelievable. I understand the risk though, so if you've got government sensitive data on your computer, or no backups, don't use the "full access" option. Babysit what it does instead.
This will make it much easier to trap people into installing it without any isolation just to their primary user account or even make it run with admin privileges by default. With the recent security related events we already see that it seems to be wide spread practice that many operators avoid the hassle of isolating their agents. It is just an incredible cultural experience to see how quick stupidity gets accepted…
A VM would be even better, but people could presumably run this in one if we manage to convince them of higher sandboxing in general ?
Earlier quoted context omitted.
Honestly, you're missing out. The productivity gains I've had with these tools is unbelievable. I understand the risk though, so if you've got government sensitive data on your computer, or no backups, don't use the "full access" option. Babysit what it does instead.
Can you give some examples? I'm evaluating where/how I could use stuff like this.
I run it in a MacOS vm, fwiw, for certain tasks. I usually hand it a repo and say “install all build dependencies” and it’ll click through installation GUIs where necessary. I wonder if the TOS of an application is enforceable if a bot agreed and a human never saw it.
It can UI test web apps if that’s part of your job, but it can also just use the browser for tasks. I’ve had it research flights by checking different dates automatically and compiling the results for me. I’ve heard others use it to handle building a shopping cart for instacart/grocery delivery.
Probably the hero usecase for most people would be app/web development. It can control either a browser or a device simulator and can iteratively build and test the application, by clicking real buttons.
Give it a full desktop in a VM if you want to, just not direct access to your system.
Earlier quoted context omitted.
Honestly, you're missing out. The productivity gains I've had with these tools is unbelievable. I understand the risk though, so if you've got government sensitive data on your computer, or no backups, don't use the "full access" option. Babysit what it does instead.
Can you give some examples? I'm evaluating where/how I could use stuff like this.
Earlier quoted context omitted.
Can you give some examples? I'm evaluating where/how I could use stuff like this.
Literally everything from generic coding agent to shopping. I run it in a MacOS vm, fwiw, for certain tasks. I usually hand it a repo and say “install all build dependencies” and it’ll click through installation GUIs where necessary. I wonder if the TOS of an application is enforceable if a bot agreed and a human never saw it. It can UI test web apps if that’s part of your job, but it can also just use the browser fo…
People need help with shopping now?
This will make it much easier to trap people into installing it without any isolation just to their primary user account or even make it run with admin privileges by default. With the recent security related events we already see that it seems to be wide spread practice that many operators avoid the hassle of isolating their agents. It is just an incredible cultural experience to see how quick stupidity gets accepted…
The Linux version seems to use bubblewrap + seccomp for a "workspace sandbox" automatically, in addition to the auto mode and/or user approval. A VM would be even better, but people could presumably run this in one if we manage to convince them of higher sandboxing in general ?
Reminder to everyone, treat these as trojans. Run them isolated from the rest of your system. Give it a full desktop in a VM if you want to, just not direct access to your system.