Agents, security risks, and access control

Summary

In this episode, Pete and Andy discuss the successful launch of Optikon, their Miro-like infinite canvas tool, and the surprising attention it received from Miro's leadership team on LinkedIn.

The conversation explores the philosophy behind building a custom tool stack using Nostr primitives, enabling seamless integration without API key management headaches.

Pete dives deep into SuperBased development, explaining how encrypted record sync works and why it matters for privacy-conscious businesses. The duo examines the implications of Claude Bot and similar AI agent tools, warning about security risks when giving agents broad system access. They explore the concept of "set and setting" for AI agents, arguing that conversations between agents can surface novel insights.

The episode closes with a discussion about Ambulando, Pete's health tracking app, and the importance of simple, low-friction data capture over granular complexity.

Sound Bites

"It's magic to be able to integrate these apps like this.""Encryption is just like passwords. Ask yourself if you've got the password. The answer is you do not.""You're going to let these AI agents into your systems because they are going to be so frigging useful.""These things operate at a speed that is so much higher than my own.""Good toilet, bad toilet. That's useful information."

Chapters

00:00 Introduction and Episode 42 Recap

01:28 LinkedIn Lurkers from Miro

03:36 Optikon Integration with Marginal Gains

07:20 The Power of Nostr-Native App Integration

10:49 Building Your Own Tool Stack

12:51 SuperBased Philosophy and Encrypted Record Sync

17:19 Sharing Encrypted Data with AI Agents

25:32 Security Risks of AI Agent Access

27:16 Claude Bot and the Zeitgeist

32:25 Set and Setting for AI Agents

37:47 Agents Having Conversations with Agents

41:37 The Confusion of Working at Agent Speed

48:07 Tolerance for Agent Mistakes

50:07 SuperBased vs Nostr Relays

58:45 Ambulando and Simple Health Tracking

1:03:16 The Problem with Over-Engineered Apps

1:06:22 Corpus Health Graph Preview

1:08:27 Using Maple for Private Data Analysis

Keywords

Opticon, SuperBased, Nostr, encrypted sync, AI agents, Claude Bot, Malt Book, set and setting, privacy, NIP-98, tool integration, Ambulando, health tracking, local-first, API keys, security

Takeaways

• Nostr-native apps enable seamless integration without copying API keys between systems - identity handles authorization automatically.
• Building your own tool stack eliminates data extraction concerns and ensures perfect synchronization across your workflow.
• SuperBased provides encrypted record sync where users own their data and can migrate between hosted services or self-hosted instances at will.
• AI agents require careful consideration of access permissions - giving them broad system access creates massive security vulnerabilities.
• The concept of "set and setting" applies to AI agents: their environment, tools, and conversational contexts dramatically affect output quality.
• Agents operating in conversations with other agents can develop novel thinking and surface insights that single-agent interactions miss.
• The time stream mismatch between humans and agents creates cognitive overload - finding the right abstraction layer is an unsolved problem.
• Simple, low-friction data capture consistently beats granular tracking systems because users actually maintain the habit.
• Encrypted data with user-controlled keys provides security even if systems are compromised - the data remains gobbledygook to attackers.
• The form factor for human-agent collaboration is still undefined - we're speedrun reinventing how humans work, now with AI participants.