It's happening. Computer freedom, everything the word "hacker" ever stood for, will be officially destroyed if this passes. We're about to be robbed of control over our computers by force of law. It's just the UK now but eventually it will be every country.
This is a very dark day. I've been prophesizing its arrival for a while now. I was secretly hoping I was wrong about everything, that we'd turn this around, that we'd enshrine a right to control our computers into law. The opposite is happening instead. It's so sad...
In short, the Pandora's Box of automated surveillance and security risk on any smartphone or tablet is opened, while a gigantic loophole for serious offenders is left open.
As it stands today; just a bit of complexity is all that is required to make AI Agents fail. I expect the gap to narrow over the years of course. But capturing complex business logic and simplifying it will probably be useful and worth paying for a long time into the future.
This means for any "manual" or existing workflow requiring a access to several systems, that requires multiple IT permissions with defined scopes. Even something as simple as a sales rep sending a DocuSign might need:
- CRM access
- DocuSign access
- Possibly access to ERP (if CRM isn't configured to pass signed contract status and value across)
- Possibly access to SharePoint / Power Automate (if finance/legal/someone else has created internal policy or process, e.g. saving a DocuSign PDF to a folder, inputting details for handover to fulfilment or client success, or submitting ticket to finance so invoicing can be set up)