Francis Bouvier
summary
Identifies three risks—credential exposure, shared remote browser sandboxes, and prompt injection—and proposes running a local lightweight browser per task that limits site access and capabilities. Describes Light Panda, an open source browser that implements the Chrome DevTools Protocol and executes JavaScript and web APIs; demo runs the same script 100 times where Light Panda returns results in milliseconds, claiming 20x faster and using about 11 MB memory versus ~90 MB for headless Chrome, validating the approach.
AI-written summary · about
chapters (7)
- 0:00AI agents web access
- 1:35Authentication privacy problem
- 1:59Sandboxing roommate problem
- 3:47Prompt injection risks
- 5:38Local lightweight browser solution
- 7:45LightPanda browser demo
- 11:24Future of agentic web
related talks
35mServer-Side Browsers: Exploring the Web’s Hidden Attack Surface
43mThe Most Secure Browser? Pwning Chrome from 2016 to 2019
19mWeb Platform Security
42mThe Perilous Future of Browser Security
31mPrivacy sandbox
30mAchieving the Web Isolation Nirvana - How far along are we?
30mEmbassies: Radically Refactoring the Web
59mThe Final Frontier: Security APIs in Modern Browsers