Comment

Comment by terracatta

You don't want passwords to enter into inference/context because once they are there the AI can accidentally share or be tricked into sending the password to other places.

With this solution to explicitly approve which credentials it can access for each task and the passwords themselves are never shared...Claude just can ask

1Password to fill them in for it at the right time in the browser. This is much safer.

We did some novel research earlier this year if you really want to see why it's bad for AI agents to just be able to grab things in your password manager...

https://1password.github.io/SCAM/replays/phish-shared-doc.ht... that's the nightmare scenario.

parent terracatta 3 months ago

No comments yet

Be the first to share your thoughts.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton