The protection mechanism to give the AI agents "read only" access to the Internet seems to have been just restricting them to HTTP GET requests.
Then they found a site where GET operations could cause a write to a wiki.
The protection mechanism to give the AI agents "read only" access to the Internet seems to have been just restricting them to HTTP GET requests.
Then they found a site where GET operations could cause a write to a wiki.
Voting on this site is a GET request to https://news.ycombinator.com/vote, so it's not that unusual.
Yet completely wrong