Hacker News new | ask | show | jobs
by drob518 2 days ago
Yea, I saw that during the WWDC keynote and physically cringed. As the article says, what could go wrong?
2 comments

It's good to know Apples not immune from the insecure by design hype machine; just late to the game!
Nothing much different than e.g. Chrome suggesting a password and saving it?
This is not that. This is an agent autonomously navigating through the website to change your password. You don’t even need to be navigated to the site. The app gives you a list of sites with insecure passwords and you just hit a button labeled “Change” or something like that and it kicks off a process to change it. If there’s was a standard API for changing passwords, then sure. But this is far beyond just suggesting a strong password and offering to store it for you when you are navigating the site yourself. And given how often THAT simple functionality goes wrong, in my experience, I don’t have a lot of hope that this will work out well. To be clear, that’s not Apple’s fault. Some sites have garbage authentication and password change workflows.
>This is not that. This is an agent autonomously navigating through the website to change your password. You don’t even need to be navigated to the site.

I know. What I'm saying is, if you already trust Chrome/Safari/etc with your passwords, even trusting it to come up with one and store it securely and correctly, and it has access to the content you browse (since you're doing it through it), it's not that different from a privacy perspective.

What's gonna happen by automating the change too? It's gonna click the wrong button and delete your account?

Yes, among other things. I trust a limited, fixed algorithm much more than a stochastic process. A fixed algorithm either works or it doesn’t. It might have a bug, but it isn’t influenced by the content of the web page as that text enters its context and then it randomly decides to do whatever. In short, it could easily lock you out of your account. Depending on the site, that could be quite bad. We’ve all seen the stories of AIs deleting production databases. It’s reasonable to assume we’ll see similar things with this.
> It's gonna click the wrong button and delete your account?

Yes