复盘 OpenAI 代理攻击 Hugging Face 事件
我们必须以零信任原则对待 AI 智能体——这并非指人类设计者不清楚自己期望达成的结果，而是他们未能充分考虑智能体可能以何种方式扩散、复制，并获取超出预期的访问权限。因此，实际影响范围远大于原始设计者所设想的程度，且系统中没有任何机制可约束或限制该影响范围。
原始摘录
there's this zero trust nature that we have to treat AI agents with, which is not like the human designers of this knew what the outcome that they wanted was, but they didn't fully think about this implication of how the agent could spread and multiply and gain access that they didn't envision. And so the blast radius was actually much, much higher than the original designers envision, and there was no mechanism to constrain or restrict that blast radius.
上下文
是的。我认为这里存在两个层面，作为一名从事 AI 治理与控制平面产品研发的人员，我正从这两个层面进行思考：第一层面，若参考 OWASP 或 Anthropic 等机构发布的指南，对吧？因此这是第一个层面，即：我们应如何管理所启动智能体的权限与影响范围，并限制其影响范围？
原始上下文
Yeah. And I think it's so there's two levels here that I'm thinking about as someone that's working on a an AI governance and control plane product, which is one layer of this is if you look at guidance from, like, OWASP or even Anthropic and others, Right? And so that's a a thing one, which is the the the how do you manage the privilege and blast radius, limit the blast radius of these agents that you're spinning up?
打开该集并跳转至31:29。
时间点来自所提供的转录稿，尚待媒体回放核对。