- The players in competitive games don't write code. Coding agents do. When you copy the code outside the sandbox and run it, what permissions does it get?
- Game players usually don't have access to confidential material, so you don't need to prevent them from exfiltrating it.
People want convenience more than they want security. No one wants permission grants to go away in minutes or hours. Every time the agent is stopped by permissions grant check, the average user experience is a little worse.
Here are some important differences:
- The players in competitive games don't write code. Coding agents do. When you copy the code outside the sandbox and run it, what permissions does it get?
- Game players usually don't have access to confidential material, so you don't need to prevent them from exfiltrating it.
Was this written with a LLM? If so, please add a note about it at the start of the README.
People want convenience more than they want security. No one wants permission grants to go away in minutes or hours. Every time the agent is stopped by permissions grant check, the average user experience is a little worse.
> I wrote a short position
> "Reality check"
Hi GPT :)
I thought "surely they wouldn't ...." The issues in the article are more blatant. You were right and caught it extremely quickly.