跳到正文
Karina· @karinanguyen · X·· 3 小时前AI 评分62
AI 导读

Karina Nguyen 引用美国多所大型银行检测到客户账户内未授权第三方 AI 智能体的报道,认为需要类似 OAuth 的 AI 智能体授权机制。她指出难点在于定义“替我处理”究竟授权了什么,尤其是智能体再委托其他智能体时,密码学可验证权限和审计轨迹,但更难的是防止一串合理决策变成用户从未同意的行为。

正文 · 原文

we’ll need something like oauth for ai agents, but the hard part is defining what “handle this for me” actually authorizes. especially when your agent delegates to another agent. cryptography can verify the permissions and the audit trail. the bigger problem is making sure a chain of reasonable decisions doesn’t become something you never agreed to.

引用Madison Mills@MadisonMills22
SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios. The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios. Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said. Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior. Read my latest for Axios here: https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access
在 X 查看被引用的帖子

来源:Karina · x.com