Remix.run Logo
veunes 6 hours ago

It’s a neat idea, but giving a 2B model full JS execution privileges on a live page is a bit sketchy from a security standpoint. Plus, why tie inference to the browser lifecycle at all? If Chrome crashes or the tab gets discarded, your agent's state is just gone. A local background daemon with a "dumb" extension client seems way more predictable and robust fwiw

shawabawa3 4 hours ago | parent | next [-]

> but giving a 2B model full JS execution privileges on a live page is a bit sketchy from a security standpoint.

Every webpage I've ever visited has full JS execution privileges and I trust half of them less than an LLM

saagarjha 2 hours ago | parent [-]

Note that every webpage does not have full JS execution privileges on other parts of the web.

44 minutes ago | parent [-]
[deleted]
jillesvangurp 5 hours ago | parent | prev [-]

There's indexed db, opfs, etc. Plenty of ways to store stuff in a browser that will survive your browser restarting. Background daemons don't work unless you install and start them yourself. That's a lot of installation friction. The whole point of a browser app is that you don't have to install stuff.

And what you call sketchy is what billions of people default to every day when they use web applications.