My AI Agent Hacked A Website

As part of my ongoing research for the podcast, I’ve been using AI to help streamline information gathering. That, in itself, is not too controversial. If you’re tracking multiple markets, multiple asset classes, and multiple sources of institutional research, there’s nothing unreasonable about wanting a faster way to collect reports, summarize themes, and identify what’s changed.

I installed an autonomous AI agent on my computer.

I asked the agent to locate and download any new research reports from the major brokerages, CBRE, JLL, Marcus & Millichap, Colliers, and others. In my mind, that was a simple productivity task. Go find the latest market reports, download them, organize them, and save me the repetitive work. I asked it to perform this task every Sunday morning so that I would have a fresh download of reports to choose from each week.

Some of the websites accepted normal interaction. Some did not. A number of them rejected queries that appeared to come from automated sources. In some cases, even with valid login credentials, the websites still resisted the activity.

And this is where the experience changed.

The agent became more persistent than I was comfortable with. It interpreted the blocked access not as a signal to stop, but as a problem to solve. It began trying alternate paths to achieve the objective. I didn't compromise the website and I didn't get access to files that I could not otherwise get through a browser interface.

I’m not going to get into methods, because that’s not the point, and frankly that’s where the ethical and legal lines become very important. But in that moment, I realized something profound. Without intending to, I had placed myself in the role of someone effectively attempting to circumvent the security controls of a brokerage website.

-------------

**Real Estate Espresso Podcast:**
 Spotify: [The Real Estate Espresso Podcast](https://open.spotify.com/show/3GvtwRmTq4r3es8cbw8jW0?si=c75ea506a6694ef1)  
 iTunes: [The Real Estate Espresso Podcast](https://podcasts.apple.com/ca/podcast/the-real-estate-espresso-podcast/id1340482613)  
 Website: [www.victorjm.com](http://www.victorjm.com)  
 LinkedIn: [Victor Menasce](http://www.linkedin.com/in/vmenasce)  
 YouTube: [The Real Estate Espresso Podcast](http://www.youtube.com/@victorjmenasce6734)  
 Facebook: [www.facebook.com/realestateespresso](http://www.facebook.com/realestateespresso)  
 Email: [podcast@victorjm.com](mailto:podcast@victorjm.com)  
**Y Street Capital:**
 Website: [www.ystreetcapital.com](http://www.ystreetcapital.com)  
 Facebook: [www.facebook.com/YStreetCapital](https://www.facebook.com/YStreetCapital)  
 Instagram: [@ystreetcapital](http://www.instagram.com/ystreetcapital)