Hacker News Reader

Am I missing something? This isn't a vulnerability. Your agent can see the files in its virtual environment. SSH keys are also not necessarily confidential. Please don't use AI to write blog posts.

View on HN

But should you see that if you just use it as as service?

you won't unless you deliberately try to read all that stuff

But should the AI simply obey?

Unless there is a reason not to. Giving the user the contents of their own sandbox is fine if you're supposed to let them run anything in it to complete the requested tasks.

If the only purpose of the sandbox were to isolate the instance of the service the user used then it might be a different expectation.

As a user, yes please.

author here, Yeah the System Files are in the ios app, but what it sent me was the entire runtime as well. from the root.

Reply on news.ycombinator.com