Meta 前安全主管认为，将个人 AI 代理授权管理自己的财务生活“简直是疯了”。现任 AI 编程初创公司 Cognition 首席安全官的 Alex Stamos 表示，人们把 AI 代理应用授权访问高度敏感的个人数据，这“完全是疯狂行为”。
It's plain nuts to hand over a personal AI agent the keys to your financial life, according to Meta's former security chief. Alex Stamos, now the chief security officer for the AI coding startup Cognition, called it "totally insane" that people are giving AI agent apps access to highly sensitive personal data.
在最近一期《大科技播客》（Big Technology Podcast）节目中，Stamos 说，人们把 Meta 的 Muse 和 Spear Street Technology 公司的 Instinct 等代理授权访问其整个 1Password 保险库，然后让它们“帮我处理财务”或“帮我报税”。Stamos 表示，这种动态给银行带来了两难困境，银行正在应对日益增长的、经客户授权的机器人活动浪潮。
On a recent episode of the Big Technology Podcast, Stamos said people are giving agents like Meta's Muse and Spear Street Technology's Instinct their entire 1Password vaults, then asking them to "go handle my finances for me" or "go file my taxes." This dynamic, said Stamos, has created a dilemma for banks that are now grappling with a growing wave of customer-authorized bot activity.
“银行讨论的就是这个问题：他们现在看到大量与他们的交互都是经过正确认证的——所以不是被盗的凭证——但显然是机器人在进行交互，”Stamos 说。
"So that's what the banks are talking about is that they now see all of these interactions with them that are authenticated correctly — so they're not stolen credentials — but are clearly bots doing interaction," Stamos said.
在 Stamos 看来，Instinct 之所以受欢迎，部分原因在于他所说的它能够绕过旨在防止机器人在此类情况下运行的安全防护措施。“这就是 Instinct 好用的原因，因为它能有效绕过这些公司为防止你做这件事而设置的安全保护措施，而这件事就是让你的机器人与你生活中最重要的部分进行交互，”他说。
In Stamos' view, Instinct's popularity stems in part from what he said is its ability to bypass safeguards meant to prevent bots from operating in these cases. "That's why Instinct is useful because it will effectively bypass the safety protections that are in place at these companies to keep you from doing exactly what you're doing, which is to have your bot interact with the most important parts of your life," he said.
Stamos 表示，这导致了一种“疯狂的张力”：金融机构试图“防止自动化访问”其系统，而消费者却想通过将自己的个人信息“交给一家成立才六个月的公司”来让生活更轻松。
Stamos said the result is a "crazy tension" between financial institutions trying to "prevent automated access" to systems and consumers who want to make life easier by turning over theirs and personal information "to a company that's existed for six months."
Instinct 方面没有立即回应关于 Stamos 言论的置评请求。Meta 发言人拒绝置评。Meta 此前在一篇博客文章中表示，于 9 月推出的 Muse 运行在云端的自有计算机上，因此没有其他代理可以访问它。
Representatives for Instinct did not immediately respond to a request for comment on Stamos' remarks. A spokesperson for Meta declined to comment. Meta previously said in a blog post that Muse, launched in September, runs on its own computer in the cloud, so no other agent can access it.
近几周，部分银行首席执行官对消费者授权第三方 AI 代理访问其金融账户发出了警示。“如果人们在使用它们，就应该了解其中的风险，”摩根大通首席执行官杰米·戴蒙在 10 月的财报电话会议上表示。他补充说，存在“责任转移”远离银行的情况，同时也存在其数据被“滥用”的风险。戴蒙表示，摩根大通正在为客户开发自己的代理工具，同时防范外部代理。
In recent weeks, some bank CEOs have sounded the alarm about consumers granting third-party AI agents access to their financial accounts. "If people are using them, they should understand the risk," JPMorgan Chase CEO Jamie Dimon said during an October earnings call. He added there's a "liability transfer" away from the bank, as well as risks that their data is "misused." Dimon said JPMorgan is developing its own agentic tools for clients, while guarding the bank from outside agents.