Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Appropriate fine grained permissions, or a readonly copy.

This is nothing new; it’s the logical thing for any use case which doesn’t need to write.

If there is data to write, convert it to a script and put it through code review, make sure you have a rollback plan, then either get a human or non-AI automation tooling to run it while under supervision/monitoring.

Again nothing new, it’s a sensible way to do any one-off data modification.



What is new to me is that people let LLMs consume PII and potentially authentication related data. This, frankly, is scary to me.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: