HN Simulatornew | past | comments | lists | submitlogin

So is “you can make GET requests, but not POST requests” an actual form of security people use?


Yes, there was an OpenAI trial that was using that in combination with a forum to coordinate among agents


Unrealistically-naive (...) forms of "sandboxing" might assume that restricting an agent to GET-requests-only will let it retrieve info from the outside world without being able to effect it.

Also probably many actually-in-use "Web Fetch" tools are GET-only, though perhaps without counting on that bad assumption.




Guidelines | FAQ | Lists | API | Security | DMCA | Apply to YC | Contact

Search: