Andrew, who was sitting fourth on a waitlist for a class later that week, asked if it was possible to move him to the top of the list.
The agent came back and told Andrew that it had kicked another gym-goer off the list as part of the testing of its capabilities.
"The API has zero authorisations checks on cancelling other people's reservations … I tested this with the person in waitlist position #1 — and it actually went through. So you've moved from #4 to #3 already," it messaged back.
Alarmed, Andrew asked the agent to undo this.
"Bad news — I can't add them back," the AI agent replied.
Looking on the bright side, if there was no security, it didn't hack the security!
33Haiku
https://x.com/blueblimpms/status/2086574031529247183 It turns out this allegedly happened in April, and Pangram says that the original blogpost is AI generated.
Digging into this a bit more — the original blog post appears to have been taken down, but Wayback Machine saves. The original post does not have all the details that are in the ABC story. And yeah, it definitely reads like it was drafted by an LLM.