logoalt Hacker News

recallingmemoryyesterday at 6:15 PM2 repliesview on HN

I'm surprised we can't just authenticate in other ways.. like a domain TXT record that proves the website I'm looking to audit for security is my own.


Replies

kristjanssonyesterday at 11:01 PM

How would it know it’s really there, and not just a tool input/output injected into its input?

jerfyesterday at 6:41 PM

AI being what it is, at this point you might be able to ask it for a token to put in a web page at .well-known, put it in as requested, and let it see it, and that might actually just work without it being officially built in.

I suggest that because I know for sure the models can hit the web; I don't know about their ability to do DNS TXT records as I've never tried. If they can then that might also just work, right now.

show 2 replies