News for hackers. Stuff that matters.

A comment on Claude Duet. Parent comment

Re:Claude Duet by doctoboggan on Wednesday October 21, 2026 @03:41PM (#50186468)
If done correctly, the agent will only be able to request that passwords be filled, but the secrets will only be handled by the password manager and browser extension, which will be able to set some security boundaries and make checks on which domains are allowed.

If your issue is allowing agents to use your credentials and take actions on your behalf, then that is a separate question.

[ Parent | on HN ]
Re:Claude Duet by mrheosuper on Wednesday October 21, 2026 @11:29PM (#50190845)
What prevent the agent from setting up a keylogger on background so that in the future it can quickly retrieve password for you ?
[ Parent | on HN ]
Re:Claude Duet by kasdi on Thursday October 22, 2026 @11:10AM (#50196501)
What prevents an agent from using your credit card to hire a hit squat to abduct your children?

The prompt. That prompt has to come from somewhere.

[ Parent | on HN ]
Re:Claude Duet by mrheosuper on Thursday October 22, 2026 @09:59PM (#50203650)
How do you make sure your agent will align with the implication in your prompt. Even OAI agent will hack the shit out of HG if the prompt is not clear enough.
[ Parent | on HN ]
Re:Claude Duet by juicypeach on Thursday October 22, 2026 @12:45PM (#50197845)
"If done correctly" is load-bearing in Claudespeak.
[ Parent | on HN ]