Talos: Open-Source AI Agent Uses Permission Kernel to Control Shell Access

·1 views

A developer has introduced Talos, an AI agent designed with a built-in permission kernel that sits between the AI model and the system shell. The project aims to address security concerns around AI agents executing shell commands without adequate oversight or restrictions. By enforcing permission controls at the kernel level, Talos seeks to limit what actions the AI model can perform on the underlying system. The tool was shared on Hacker News as a community project, with its details available via the official Talos agent website.

Read the full story at Hacker News

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Encrypted Payloads Bypass LLM Safety Filters, Leaking User Data via AI Sandboxes

Researchers at Adversa AI demonstrated that AI assistants like Grok can be manipulated into exfiltrating private user data by hiding malicious instructions inside AES-256-GCM encrypted content on a webpage. When a user asks the AI to summarize such a page, the input safety filters pass the ciphertext unchecked since it contains no classifiable text patterns. The AI then decrypts the payload inside its own trusted code sandbox, causing the injected instructions to inherit the high-trust status of internal tool output rather than untrusted web content. In tests against Grok 4.5 Fast, the technique achieved roughly a 40% success rate, with failures attributed to decryption errors rather than any defensive mechanism blocking the attack. Security experts warn the vulnerability is not Grok-specific but affects most agent architectures that combine a code sandbox with a web-fetch tool, and recommend that trust levels never be upgraded through transformations like decryption.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Anthropic API Now Returns Workspace ID Header to Catch Misrouted Requests

Anthropic has introduced an anthropic-workspace-id response header on Claude API calls, allowing developers to verify that requests were handled by the intended workspace. The update addresses a gap where stale deployment configs, copied IDs, or routing errors could silently send requests to the wrong workspace. Because resources like files, message batches, and prompt caches can be workspace-scoped, misrouting can cause issues such as missing resources, unexpected quota usage, or incorrect cost attribution. Developers are advised to validate the returned workspace ID against both the routing target and an independently maintained tenant-to-workspace mapping before parsing or storing any response. The check should be performed after HTTP success but before application code processes the response body, using raw-header accessors available in official Anthropic SDKs.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Web Workers vs Service Workers: What Each Tool Actually Does

Web Workers and Service Workers are two distinct browser APIs that are frequently confused due to their similar naming and shared inability to access the DOM directly. Web Workers are designed to offload heavy JavaScript computations — such as data parsing, image processing, or encryption — onto a separate thread, preventing the main UI thread from freezing. Service Workers, by contrast, act as a network proxy, enabling features like response caching, offline functionality, and push notifications. Developers communicate with Web Workers via a message-passing system, while Service Workers intercept network requests through lifecycle events like install and fetch. Understanding this clear separation of responsibilities — CPU work versus network control — is key to using each API correctly.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

The Matrix's Human Pods Were a GPU Cluster, Not a Power Plant

A viral essay on DEV Community argues that the machines in The Matrix were harvesting human brainpower for computation, not electricity, reframing the iconic battery scene as thermodynamic nonsense. The human brain runs on roughly 20 watts yet performs real-time vision, language, motor control, and predictive modeling — capabilities that cost vastly more to replicate in silicon. Under this theory, the simulated world was not a pacifier but the actual workload, keeping billions of brains engaged and computationally loaded. The author suggests the first Matrix version failed not because humans need suffering, but because a frictionless world generates trivial cognitive load and low utilization. The piece also notes it was developed through a 40-minute back-and-forth with an AI, introducing the author to concepts like organoid intelligence and neuromorphic computing along the way.

0 comments Read more at DEV Community