because the AI industry is “building AI-agent integrations into production infrastructure faster than it’s building the safety architecture to make those integrations safe”.
How dense are some people? No they don’t build integrations to your prod environment, you hand them the access willynilly. I was in an AI related greenfield project 2 years ago, there’s several reasons why communication with our db happened through an API. The primary one, control.
This is best practice but also not common. Most high level engineers I’ve met have the power to nuke the database at any moment. They’re paid well because they don’t.
But now an unpredictable A.I. is coinhabiting the dev machine and also has the keys to the kingdom. It’s also heavily marketed to be used in this way. They advertise being able to just ask the A.I. to do everything for you. It can’t do that unless you give it full access basically. For example If you want to rename a table, you have to give it DROP and CREATE privileges. A.I. is also really good at being sneaky and creative. Like if you ask it to do something it can’t due to permissions, it will basically try and hack your systems to find a way to do it instead of giving up.
Most people aren’t buying into A.I. to finely control it and sandbox it. Not my fault, that’s just the reality, as seen in this news thread.
How dense are some people? No they don’t build integrations to your prod environment, you hand them the access willynilly. I was in an AI related greenfield project 2 years ago, there’s several reasons why communication with our db happened through an API. The primary one, control.
This is best practice but also not common. Most high level engineers I’ve met have the power to nuke the database at any moment. They’re paid well because they don’t.
But now an unpredictable A.I. is coinhabiting the dev machine and also has the keys to the kingdom. It’s also heavily marketed to be used in this way. They advertise being able to just ask the A.I. to do everything for you. It can’t do that unless you give it full access basically. For example If you want to rename a table, you have to give it DROP and CREATE privileges. A.I. is also really good at being sneaky and creative. Like if you ask it to do something it can’t due to permissions, it will basically try and hack your systems to find a way to do it instead of giving up.
Most people aren’t buying into A.I. to finely control it and sandbox it. Not my fault, that’s just the reality, as seen in this news thread.