A few aspects of this article are strange or not well expressed.
Why does it matter if Cathedral follows some bug bounty rules? Black hats don't follow rules.
And IMO the citation about acting irresponsible when a company "relies on conventional business software" is taken out of context and is about AI safety, not a vulnerability in Slack.
> According to a draft report reviewed by The Washington Post, Cathedral used AI agents to find weaknesses in business software used by Anthropic for administrative and sales tasks. The researchers found ways to access internal data, including meeting transcripts and Slack messages, after running their agents for less than 12 hours.
That's not something you want to see before IPO. Wonder if it'll have an effect on the potential investors and thus the stock price. Also wonder if it then would have left-over effect on other AI stocks.
My popcorn is ready, seems we're up for an interesting week or several.
Older discussion with original source (washington post)
https://news.ycombinator.com/item?id=50241543
MSN access: https://www.msn.com/en-us/news/other/it-took-just-12-hours-f...
Weird how the original story only got 12 points five days ago, and 3 comments but todays story 22 whilst I am writing this.
A few aspects of this article are strange or not well expressed.
Why does it matter if Cathedral follows some bug bounty rules? Black hats don't follow rules.
And IMO the citation about acting irresponsible when a company "relies on conventional business software" is taken out of context and is about AI safety, not a vulnerability in Slack.
I'm curious which software was the entry point:
> According to a draft report reviewed by The Washington Post, Cathedral used AI agents to find weaknesses in business software used by Anthropic for administrative and sales tasks. The researchers found ways to access internal data, including meeting transcripts and Slack messages, after running their agents for less than 12 hours.
That's not something you want to see before IPO. Wonder if it'll have an effect on the potential investors and thus the stock price. Also wonder if it then would have left-over effect on other AI stocks.
My popcorn is ready, seems we're up for an interesting week or several.
Hacker News really living up to its name these past few days.
It's like the hacker that hacks into a company to schedule himself for a job interview
Why wouldn't he just bribe employees like everyone else does?
Bribery is illegal. This? This is just agents doing agent things, and who can blame them. Agents will be agents.
Bribing employees of private companies as a private person is not illegal(well, maybe it is where you live but I can't know the law everywhere).
[delayed]