Agents with full-disk and accessibility access are an enterprise security nightmare, argues Runlayer
leveragedupside · x · 2026-10-21
A security discussion argues enterprise agents act as "unsecured extensions" of employees: full-disk and accessibility grants are all-or-nothing, per-app rather than per-task, and persist until revoked—so one bug fix leaves every later task with whatever permissions were granted. The fix isn't identity inheritance (agents should already inherit the caller's identity, as Runlayer does) but task-scoped access: what the agent can touch, for how long, checked at action time. Until OS-level primitives exist, start by auditing which agents already hold these grants.
More from coding & agent
- Beat AI's samey frontends: import a design system before generating UI — dotey · 2026-10-21
- Trust slider over Clairic: 102 manual reviews catch 74 of 76 extraction errors — michellechen · 2026-10-21
- FreePi Bets on Ad-Supported Coding Help to Undercut $20/Month AI Coding Subscriptions — heyneighbor · 2026-10-21
- RedMonk: MCP and A2A Verify Publishers, Not Safety — Registries Become the Trust Layer — rseroter · 2026-10-21
- Agentic refactor: 600 PRs moved OpenClaw's web UI from Lit to Solid 2.0 in 2 weeks — steipete · 2026-10-21
- 19 Recorded Runs of 18 Agents Building a Lisp Interpreter, Released on Hugging Face — strickvl · 2026-10-21