Good.
Technology
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
"If your prod can be deleted by your AI, it should be."
This was on Hacker News: https://news.ycombinator.com/item?id=47911524
Twitter link: https://xcancel.com/lifeof_jer/status/2048103471019434248
Hacker New's sentiment on this from the comments I've read is that it is the author's own fault.
As much as I want to blame AI for this, there are many hurdles for the user to get through to even allow Claude to do that. I'd be very suprised if that's not user error.
Can you get an AI to code? Yes. Can you get it to stop you from running your operation in such a stupid way that it will end up destroying it? No.
3-2-1
Its really common for companies to not have an offsite backup. My own employer only offsites the customer data, not our core biz stuff. And I setup the offsite replication. It did not exist until I built it. (Proxmox Backup Server is tha best!)
Doesn't anyone restrict their AIs rights? An AI should not be allowed to delete the backup. Only someone with admin rights should be able to do that. Normal users, developers and AIs of course should not have the right to touch the backup. Do these people run AI agents as root?
We just got sick of approving all those annoying prompts! /s
Like all interesting outages, there are probably multiple key action items.
I'm also curious why deleting a "staging volume" would affect prod. I don't know Railway, but it seems like a bad architectural design.
Wow there's a lot of people in this thread defending the LLM. “They just didn’t set it up right” gtfo
#yolo
Why even give an agent unrestricted access to anything critical in the first place? What do they think they achieve that they cannot achieve otherwise?
There's stupid from top to bottom here.
The company is stupid for allowing an AI full root access to their entire setup.
The provider is stupid for only generating full-access API keys. They're even stupider for storing backups with a volume, so deleting the volume (zero confirmation via API key) also insta-deletes the backups. And they're stupidest for encouraging users to plug AIs into this full-trust mess.
And the company is absolute stupidest for having no backups other than the provider's builtin versioning.
Learning from mistakes of people dumber than you isn't a thing these days. Prepare for one AI disaster after another
Skill issue