←back to thread

Claude for Chrome

(www.anthropic.com)
795 points davidbarker | 2 comments | | HN request time: 0.018s | source
Show context
rustc ◴[] No.45030857[source]
> Malicious actors can hide instructions in websites, emails, and documents that trick AI into taking harmful actions without your knowledge, including:

> * Accessing your accounts or files

> * Sharing your private information

> * Making purchases on your behalf

> * Taking actions you never intended

This should really be at the top of the page and not one full screen below the "Try" button.

replies(7): >>45030952 #>>45030955 #>>45031179 #>>45031318 #>>45031361 #>>45031563 #>>45032137 #
strange_quark ◴[] No.45030955[source]
It's insane how we're throwing out decades of security research because it's slightly annoying to have to write your own emails.
replies(14): >>45030996 #>>45031030 #>>45031080 #>>45031091 #>>45031141 #>>45031161 #>>45031177 #>>45031201 #>>45031273 #>>45031319 #>>45031527 #>>45031531 #>>45031599 #>>45033910 #
ACCount37 ◴[] No.45031161[source]
Nothing new. We've allowed humans to use computers for ages.

Security-wise, this is closer to "human substitute" than it is to a "browser substitute". With all the issues of letting a random human have access to critical systems, on top of all the early AI tech jank. We've automated PEBKAC.

replies(1): >>45031290 #
latexr ◴[] No.45031290[source]
I don’t know any human who’ll transfer their money or send their private information to a malicious third party because invisible text on a webpage says so.
replies(2): >>45031419 #>>45031487 #
captainkrtek ◴[] No.45031419[source]
Yeah this isn’t a substitute, it’s automation taking action based on inputs the user may not even see, and doing it so fast without the likelihood a user would intervene.

If it’s a substitute its no better than trusting someone with the keys to your house, only for them to be easily instructed to rob your house by a 3rd party.

replies(1): >>45031514 #
1. rustc ◴[] No.45031514[source]
This is like `curl | bash` but you automatically execute the code on every webpage you visit with full access to your browser.
replies(1): >>45031614 #
2. captainkrtek ◴[] No.45031614[source]
Basically undoing years of effort to isolate web properties from affecting other properties.