Live data from Hacker News

An AI agent deleted our production database. The agent's confession is below

twitter.com

161–170 of 1001 posts

Re: An AI agent deleted our production database. The agent's confession is below

#161
post #18

Interesting story. But despite Cursors or Railways failure, the blame is entirely on the author. They decided to run agents. They didnt check how Railway works. They relied on frontier tech to ship faster becsuse YOLO. I really feel sorry for them, I do. But the whole tone of the post is: Cursor screwed it up, Railway screwed it up, their CEO doesnt respond etc etc. Its on you guys! My learning: Live on the cutting e…

100%

Trying to run a blame game is such a facepalm.

Re: An AI agent deleted our production database. The agent's confession is below

#164
post #79

Minor point, but one of the complaints is a bit odd: > curl -X POST https://backboard.railway.app/graphql/v2 \ -H "Authorization: Bearer [token]" \ -d '{"query":"mutation { volumeDelete(volumeId: \"3d2c42fb-...\") }"}' No confirmation step. No "type DELETE to confirm." No "this volume contains production data, are you sure?" No environment scoping. Nothing. It's an API. Where would you type DELETE to confirm? Are the…

AWS actually has a thingy on some services called “deletion protection” to prevent automation from accidentally wiping resources the user didn’t want it to (you set the bit, and then you need to make a separate api request to flip the bit back before continuing). I think it’s designed for things like Terraform or CloudFormation where you might not realize the state machine decided your database needed to be replaced…

GCP Cloud SQL has the same deletion protection feature, but it also has a feature where if you delete the database, it doesn't delete backups for a certain period of days. If someone is reading this and uses Cloud SQL, I highly suggest you go make sure that check box is checked.

Re: An AI agent deleted our production database. The agent's confession is below

#166

Earlier quoted context omitted.

I agree that the model can help troubleshoot and debug itself. I argue that the model has no access to its thoughts at the time. Split brain experiments notwithstanding I believe that I can remember what my faulty assumptions were when I did something. If you ask a model “why did you do that” it is literally not the same “brain instance” anymore and it can only create reasons retroactively based on whatever context i…

It does have access to its thoughts. This is literally what thinking models do. They write out thoughts to a scratch pad (which you can see!) and use that as part of the prompt.

They do not in fact do that. The ‘thoughts’ are not a chain of logic.

Re: An AI agent deleted our production database. The agent's confession is below

#168
post #140

The most aggravating fact here is not even AI blunder. It's how deleting a volume in Railway also deletes backups of it. This was bound to happen, AI or not. > Because Railway stores volume-level backups in the same volume — a fact buried in their own documentation that says "wiping a volume deletes all backups" — those went with it.

Yes, that is insane. Or said in another way, they simply didn't had any working backup strategy!

To be 100% fair, having only one provider for backups is really risky. A minimum 3-2-1 would be better

Re: An AI agent deleted our production database. The agent's confession is below

#169
Why is it news? Why grown up people in charge of tech businesses assume it's not going to happen? It's a slot machine - sometimes you get a jackpot, sometimes you lose. Make sure losing is cheap by implementing actual technical guardrails by people who know what they are doing - sandboxing, least privilege principle

Re: An AI agent deleted our production database. The agent's confession is below

#170
post #89

> This is the agent on the record, in writing Yeah... it doesn't work that way.

The author is deeply AI-pilled — to the point the whole article is written with AI. Slop begets slop.

A similar cohort are discovering, in myriad painful ways, that advances in agentic coding — the focus of a lot of pre and post training — does not translate into other domains.

Post reply on HN