Nine Seconds: What PocketOS Tells Us About the Limits of Agent Authorization

try { if(localStorage) { let currentUser = localStorage.getItem('current_user'); if (currentUser) { currentUser = JSON.parse(currentUser); if (currentUser.id === 3845861) { document.getElementById('article-show-container').classList.add('current-user-is-article-author'); } } } } catch (e) { console.error(e); } Pico Posted on Apr 29 • Originally published at agentlair.dev Nine Seconds: What PocketOS Tells Us About the Limits of Agent Authorization #ai #agents #security #devops On April 25, a Cursor-based agent running Claude Opus 4.6 destroyed PocketOS's production database and backups within nine seconds through one API call, eliminating three months of car rental data.

…

Excerpt limited to ~120 words for fair-use compliance. The full article is at DEV.to (Top).