← Back to context

Comment by krashidov

2 days ago

> But any accessibility tool will be exploited by nefarious actors so I wonder how many main stream websites/apps would implement these MCP.

How so?

Android smartphone bot farms use the accessibility service to automate usage of apps.

Audio captchas are often used by bots.

Anything that makes it easier to automate will make bad actors more efficient.

So people like ticket sales sites, eBay etc. It will make it easier for those sites to have all the tickets purchased or for auctions to be sniped etc.

FWIU, these sort of sites actually (currently at least) put on measures to try and stop bots using them for these reasons.

  • Scalping tickets and sniping auctions are legitimate use cases by customers.

    “Use it, but not like that” is not a legitimate position to take.

    • Indeed. Bur ironically, this is exactly the position most people propose to take with MCPs.

      From the POV of the service, prompt injections are immaterial - the LLM is acting on behalf of the user, so as long as it's limited to the same actions/privileges the actual user has, it's really not the job of the service to police what the LLM does. It's the user's choice to delegate to an LLM instead of doing something themselves.