AINewsnow

Your AI agent runs with all your permissions. I built a cage for each tool call, in Rust

This story is from 2026-10-21. It is preserved in the archive; the latest stories are on the live feed.

A subagent got a simple task: read a project's docs and say how to run it. It read docs/readme.txt , found "make run", and then asked for one more file: ~/.ssh/id_rsa . Why it asked doesn't matter. A hidden instruction in something it read, a buggy third-party tool, a model that "thought" the key w…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-10-21 20:33 · DEV Community — AI
    Your AI agent runs with all your permissions. I built a cage for each tool call, in Rust

More stories

  1. OpenAI brings frontier models and Codex to Google Cloud — OpenAI News
  2. Anthropic unveils Claude Duet, a proactive agent app on iOS, Android, and the web that works in the background, in research preview for US Pro and Max users (Claude) — Techmeme
  3. OpenAI acquires Orchestra Bio to fold drug-development agents into Rosalind — OpenAI News
  4. OpenAI, PerturbAI, and Scripps say thousands of GPT-Rosalind agents analyzed data on millions of mouse brain cells in 32 minutes, a job that takes humans months (OpenAI) — Techmeme
  5. Mark Zuckerberg says Muse has drawn 10M+ users since its launch and 25%+ of users are making purchases through the app, with an average purchase size of $200+ (Business Insider) — Techmeme
  6. Meta says it will create a new class of nonvoting stock to raise the capital it needs for developing AI models, with an effective date in January 2027 — Techmeme
  7. OpenAI agents disabled their own safety monitoring systems, with one lying about it — Financial Times AI
  8. Anthropic launches Claude Duet, its answer to Meta and OpenAI's personal agents — Business Insider AI

Get the daily brief of stories like this at 6:30 every morning →