消费者越来越多地委托AI agents进行访问,人们对此感到关切。 现在,安全部门正试图赶上。
密码管理器1Password on星期四发布是用户可以允许agents代表用户登录其个人账户的新工具,agent从未访问过用户的证书。
新平台被誉为"Agents的1Password",通过在用户agent和密码管理器之间建立通信系统来完成这个任务。 agent试图代表用户登录时,会向1Password发送独特的数字密钥,以确认agent的数字身份。 然后向用户发送关于登录尝试的警告,并可亲自确认请求。 1Password然后在agent中签名,代表数字助理填写证书,这使得它能够登录并完成手头的任何任务。
1Password for Agents允许用户选择自己选择的agent——无论是Anthropic的Claude Dut,OpenAI的Dots还是ChatGPT Work,Grok的Bot,Meta的Muse,还是Town的agents,都是AI助理启动。 称公司正在与其他公司合作扩大服务范围。
称公司在博客文章中写道,“Agents的1Password为人们提供了将任务委托给个人AI agents,同时控制这些任务所需要的密码、秘密和资质的可靠方式。”
在线代理活动越来越不稳定的主要机构。 1Password的新平台是发布
这不一定是无赖的agents盗用账户,然而,与agent有关的问题的潜力仍然很大。 最大的问题似乎是,大多数银行无法知道代理活动是否与用户的要求挂钩。
Axios采访的一家大通公司发言人还告诉出口说,客户“不应向任何人提供用户名和密码”。
本文由 AI图鉴自动抓取并翻译,版权归原作者所有;如需查看原文请点下方链接。
Concerns have swirled over the access that consumers are increasingly entrusting to AI agents. Now, security services are trying to catch up.
Password manager 1Password on Thursday launched a new tool by which users can allow agents to log into their personal accounts on their behalf, without the agent ever having access to a user’s credentials.
The new platform, dubbed 1Password for Agents, accomplishes this by creating a system of communication between the agent, the user, and the password manager. When an agent attempts to log in on a user’s behalf, a unique digital key is sent to 1Password to confirm the agent’s digital identity. The user is then sent an alert about the login attempt and can personally confirm the request. 1Password then signs in the agent, filling in the credentials on the digital assistant’s behalf, which allows it to log in and complete whatever task is at hand.
1Password for Agents allows users to choose their agent of choice — whether that’s Claude Duet from Anthropic, OpenAI’s Dots or ChatGPT Work, Grok Bot, Meta’s Muse, or agents from Town, which is an AI assistant startup. The company says it is working with other companies to expand the service.
“Handing over a password, secret, or credential is a common shortcut to an agent, but can leave people with sensitive information in places they can no longer control as a copy gets saved for the next time,” the company said in a blog post. “1Password for Agents gives people a trusted way to delegate tasks to personal AI agents while keeping control of the passwords, secrets, and credentials those tasks require.”
Online agentic activity has increasingly unsettled major institutions. Indeed, 1Password’s new platform is launching on the same day that Axios reports that U.S. banks have begun to detect agentic activity inside user accounts.
This isn’t necessarily a case of rogue agents pilfering accounts but, rather, an example of how consumers are increasingly allowing automated services to act on their behalf, including on financial matters. However, the potential for agent-related problems is still large. The big issue appears to be that most banks cannot tell if the agentic activity is tied to user requests or not.
Bankers interviewed by the outlet described the situation as “horrifying,” and a Chase spokesperson interviewed by Axios additionally told the outlet that customers “should not give their usernames and passwords to anyone.”
Auto-fetched and translated by AI Atlas. All rights belong to the original author.