Karina· @karinanguyen · X·· 2 小时前AI 评分71
AI 导读
Karina Nguyen 认为 AI 智能体需要类似 OAuth 的授权机制,难点在于定义“帮我处理这件事”究竟授权了什么,尤其是智能体再委托给另一个智能体时。她表示密码学可以验证权限和审计记录,更大的问题是确保一连串合理决策不会演变成用户从未同意的行为。其引用的 Axios 报道称美国多家银行在客户账户中发现未授权第三方 AI 智能体,银行难以区分人类用户与智能体,正准备应对方案。
正文 · 原文
we’ll need something like oauth for ai agents, but the hard part is defining what “handle this for me” actually authorizes. especially when your agent delegates to another agent. cryptography can verify the permissions and the audit trail. the bigger problem is making sure a chain of reasonable decisions doesn’t become something you never agreed to.
SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios. The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios. Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said. Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior. Read my latest for Axios here: https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access在 X 查看被引用的帖子
来源:Karina · x.com