David Sacks: user-authorized AI agents sharing bank credentials aren't cyberattacks
kevinnbass · x · 2026-10-23
Responding to an Axios story on AI agents accessing bank accounts, David Sacks draws a line between user-authorized agents (Muse, Instinct, Grokbot) and true rogue agents that could constitute cyberattacks. Most activity in the story, he says, is the former: customers sharing credentials so agents can act on their behalf — possibly violating bank ToS requiring human logins, but not attacks.
He argues banks should support user-directed agents: Amex is already an authorized connection in Muse, letting users grant, limit, and revoke access. Read-only permission levels are a sensible interim step several banks already support, while full write access with user credentials is a different risk category. He criticizes blurring this line to frighten the public.
More from coding & agent
- AI agents fuel real-world intrusions: 2,250 M365 tenants hit, 100+ firms compromised — cyb3rops · 2026-10-23
- Anthropic donates Agent Skills to Agentic AI Foundation, home of MCP, with 70+ platforms on board — bcherny · 2026-10-23
- "Front-end is sacrificial": the case for headless, agent-built UIs — genmon · 2026-10-23
- Playwright's auto-retry hid a UI flash bug — MutationObserver test caught it — SeanOliver · 2026-10-23
- Next.js 16.2 quirk: server action promise resolves before refreshed page data renders — SeanOliver · 2026-10-23
- The worst proactive agent is an email inbox filter that competes for your attention — manosaie · 2026-10-23