A few aspects of this article are strange or not well expressed.
Why does it matter if Cathedral follows some bug bounty rules? Black hats don't follow rules.
And IMO the citation about acting irresponsible when a company "relies on conventional business software" is taken out of context and is about AI safety, not a vulnerability in Slack.
That's not something you want to see before IPO. Wonder if it'll have an effect on the potential investors and thus the stock price. Also wonder if it then would have left-over effect on other AI stocks.
My popcorn is ready, seems we're up for an interesting week or several.
> According to a draft report reviewed by The Washington Post, Cathedral used AI agents to find weaknesses in business software used by Anthropic for administrative and sales tasks. The researchers found ways to access internal data, including meeting transcripts and Slack messages, after running their agents for less than 12 hours.
private to private bribery is illegal, it doesnt matter if you're private or not. this is true in most EU countries, as well as the US, so I'm unsure where you're from
https://news.ycombinator.com/item?id=50241543
MSN access: https://www.msn.com/en-us/news/other/it-took-just-12-hours-f...
Why does it matter if Cathedral follows some bug bounty rules? Black hats don't follow rules.
And IMO the citation about acting irresponsible when a company "relies on conventional business software" is taken out of context and is about AI safety, not a vulnerability in Slack.
> AI startup's agent goes rogue, hacks Anthropic, ...
Some people trust AI with a lot - financial, health, relationships - and it would all be out there
I also expect open AI to be hacked at some point, but at least with them you can use a throwaway email
And with Gemini, google has had some incidents over the years but given their size and length of existence it's been surprisingly small / secure.
But anthropic is a typical grow-fast startup, with security likely as a secondary concern. Waiting for the shoe to drop.
My popcorn is ready, seems we're up for an interesting week or several.
> According to a draft report reviewed by The Washington Post, Cathedral used AI agents to find weaknesses in business software used by Anthropic for administrative and sales tasks. The researchers found ways to access internal data, including meeting transcripts and Slack messages, after running their agents for less than 12 hours.