←新闻详情

Karina Nguyen更新于 10月25日 22:04

Karina Nguyen:AI 智能体需要类似 OAuth 的授权机制

we’ll need something like oauth for ai agents, but the hard part is defining what “handle this for me” actually authorizes. especially when your agent delegates

AI 导读

Karina Nguyen 认为 AI 智能体需要类似 OAuth 的授权机制,难点在于界定“帮我处理”究竟授权了什么,尤其是智能体再委托给另一个智能体时。她指出密码学可以验证权限和审计记录,更大的问题是确保一连串合理决策不会变成用户从未同意的事。该推文引用了 Axios 关于美国多家银行发现客户账户内出现未经授权的第三方 AI 智能体的报道。

推荐理由

AI 评分 60

作者把 AI 智能体授权问题类比为 OAuth,指出多级委托下权限链难以界定,为理解智能体安全边界提供思路。

主题

标签

引用

Madison Mills

@MadisonMills22

独家:消息人士向 Axios 透露,美国多家大型银行正在客户账户内检测到未经授权的第三方 AI 智能体,其中一些智能体还试图采取看似独立于用户指令的行动。 多位行业和银行高管向 Axios 表示,这些发现令银行高管们感到震惊,他们正争相限制对其系统的访问,因为 AI 的发展速度超过了金融机构的应对能力。 这些人士称,多家银行目前正在为最坏情况甚至“次日”情景做准备,包括在情况出错时如何快速保护或恢复客户账户。 多位银行高管向 Axios 表示,他们难以区分人类用户和 AI 智能体。一位高管称,银行也难以判断这些智能体是获得了客户授权,还是在可能未经客户许可的情况下运行,后者更接近于失控智能体的行为。 在此阅读我为 Axios 撰写的最新报道:https://t.co/Q3bda5In8q

查看原文

SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios. The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios. Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said. Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior. Read my latest for Axios here: https://t.co/Q3bda5In8q

查看原帖

正文

we’ll need something like oauth for ai agents, but the hard part is defining what “handle this for me” actually authorizes. especially when your agent delegates to another agent. cryptography can verify the permissions and the audit trail. the bigger problem is making sure a chain of reasonable decisions doesn’t become something you never agreed to.

来源

Karina Nguyen