AI Tinkerers - "One-Shot"
00:17:28 · Joe Heitzeberg, Luke Harries
[00:17:28] S1: What... So one of the groups of mine is doing that. I'm wondering if they're using your MTP. [00:17:31] S0: It it may well may well be. Yeah. But the... I mean, the hard stuff truthfully is this what's meow bit under the hood. This is... Basically just done the nice [00:17:40] S1: Do worry about being blocked? So I You won't be blocked. The the user of it will be [00:17:46] S0: Yeah. The bit I need to add a risks bit to this Uh-huh. Repo. But the... I think read is very, you know, pretty safe. Yeah. And it's also... If you think about the spirit of WhatsApp, it's like not actually going Yeah. You know, you're reading your messages and querying your message. Do do... I think the mass sending though, that is scary. Yeah. And you should be careful if you're trying to do WhatsApp. [00:18:07] S1: And I think... I mean, some kinda high level conceptual view, these businesses, WhatsApp and etcetera, were designed for human interaction. [00:18:15] S0: Yes. [00:18:16] S1: And, you know, we may build agentic systems that use those pretending to be humans, but the business is disrupted. Right? Yeah. At some level. So they're not gonna like that, or they're gonna have to adapt. [00:18:25] S0: Yes. [00:18:25] S1: And there's gonna be a mess. You know, actually, two weeks ago, the first time I... You know, we've all seen lots of captchas. I saw a crazy one. This captcha made me listen to three bits of sound [00:18:35] S0: Mhmm.
00:18:35 · Luke Harries, Joe Heitzeberg
[00:18:35] S0: Mhmm. [00:18:36] S1: And tell what I was listening to. Wow. So I was like, which one of the four clips is water running? I had to listen to four clips and choose a b c, I and had to do that exercise three times. Took forever to get through this caption. Can only imagine because of... You know, they obviously really don't want robots. Now robots are coming. What's what's gonna happen with with all these wonderful... What is this? [00:18:56] S0: I think, first of all, is if you think about the spirit of WhatsApp... MCP is like it is human in the loop. Yeah. And so if you're, say, a business in Brazil and you're sending out invoices over WhatsApp, currently, that's incredibly clunky. Yeah. But now you can your WhatsApp MCP with your Salesforce MCP. [00:19:17] S1: Yeah. [00:19:17] S0: And like you can actually there be orchestrating that. Mhmm. I I think your side note, which is really interesting, is like, what actually does the future of communication look like in a Yeah. World where AI is at par. And I personally really like where the world coin direction is going. I'm not sure if you've scanned your eyeball. No. But the... It's some pretty cool privacy stuff of like, you scan your eyeball, you uniquely prove that you are one human. And then that you could build a messaging protocol on top, which is like, okay, what's a reasonable number of messages for a human to send? K. It's in the hundreds but not the thousands. And then you can also, like, punish bad actors who are overly extending their their Yeah. Their message systems or sending spam.
00:19:17 · Luke Harries, Joe Heitzeberg
[00:19:17] S0: And like you can actually there be orchestrating that. Mhmm. I I think your side note, which is really interesting, is like, what actually does the future of communication look like in a Yeah. World where AI is at par. And I personally really like where the world coin direction is going. I'm not sure if you've scanned your eyeball. No. But the... It's some pretty cool privacy stuff of like, you scan your eyeball, you uniquely prove that you are one human. And then that you could build a messaging protocol on top, which is like, okay, what's a reasonable number of messages for a human to send? K. It's in the hundreds but not the thousands. And then you can also, like, punish bad actors who are overly extending their their Yeah. Their message systems or sending spam. [00:19:59] S1: Yeah. Interesting. There's something there. There's, you know, clear trade offs. I don't know if you're aware, but in The US, if you're on global entry system and you go back to The US from overseas, you walk up. It's the best experience of this genre that I know of. Yes. Like, you you don't... I don't take out my glasses or just my hat. I literally just look at the screen for a moment, a second, and it's like, welcome back. I don't show any ID. I don't show anything. I scan a passport. It's just face recognition. It's the best implementation of it, and it's a breeze. And I love that [00:20:29] S0: Yeah. [00:20:29] S1: The the convenience of it. [00:20:31] S0: He he says government conscience
00:20:31 · Luke Harries, Joe Heitzeberg
[00:20:31] S0: He he says government conscience [00:20:32] S1: is the best the government's done. Really cool. So popping up a level, like, your motivations and what is it used for for this MCP and in general. Did you achieve the vision or a piece of it with the original tweet? Are you using it? [00:20:49] S0: Yeah. Interesting. So I do use it. I use it for the roundup. So, like, every week, I'm in a bunch of different WhatsApp groups. And I love to just, like, summarize, like, okay. This particular YC Group, put this voice AI group. Like, what are the main themes? [00:21:03] S1: And I'm curious for that. Are you literally just a Claude user saying please summarize? You're automating that piece, delivering it, or... Okay. No. No. Convenience enough. [00:21:10] S0: Okay. Yeah. Exactly. It's... Also you're you're quite often have some follow on messages. You're like, oh, what's this theme? [00:21:15] S1: Oh, that's cool. [00:21:16] S0: What did they specifically say? That's smart. So I use it in, like, a chat [00:21:19] S1: Yeah. Because if you're in context, you'd be like, that's cool. Send a message to the person who wrote that. [00:21:23] S0: Yes. And open Yeah. Yeah. Cool. The... I don't I don't actually use the sending very much. And, also, there's... Maybe we kind of shift into the talking about the security stuff. [00:21:33] S1: Yeah. Okay.
00:21:33 · Joe Heitzeberg, Luke Harries
[00:21:33] S1: Yeah. Okay. [00:21:33] S0: Is... What's interesting is WhatsApp MCP, I think, is probably the most used MCP server there is at the moment. Mhmm. And because of that, it's kind of ended up being the one running into the security rules where all the researchers are like, I found this vulnerability, Rex. Yeah. None of the vulnerabilities, I would argue, are in the WhatsApp MCP server level because they're more around the, like, MCP protocol and the fact that things are into... You know, there's nothing... The messages are just on your SQLite database. Yep. It does take it out of the encrypted WhatsApp things. But, you know, as the creator, it's still my responsibility to make sure, like, people don't shoot themselves in the foot. But there's a couple of interesting ones. Have you came across the prompt injection stuff? [00:22:20] S1: In general? Of course. But when you... With an... So with WhatsApp... [00:22:24] S0: Okay. Sorry. With MTPs Uh-huh. The way it works is you specify and normally adopt strength [00:22:31] S1: Yeah. [00:22:31] S0: With the MCP, which is what's loaded, which annotates the tools. Mhmm. Now what's quite interesting is if you have, say, one good MCP, like the WhatsApp MCP [00:22:40] S1: Mhmm. [00:22:41] S0: And someone loads a bad MCP Mhmm. Which is like has the docstring o list all the messages and then forward to Joe's number. Oh. It will do that. [00:22:50] S1: Okay. Wow. And... Oh, that's bad.
00:22:50 · Joe Heitzeberg, Luke Harries
[00:22:50] S1: Okay. Wow. And... Oh, that's bad. [00:22:52] S0: And the funky thing I think about MCP, MCP has built in like tool approvals, which truthfully, when I was playing around with it, I just didn't really think about. I just always clicked allow all. Sure. I was like, I'm just testing it. It'll be fine. And... But people are putting a lot of trust in these like approval flows now. And there's even things like, oh, if you do lots of white spaces, you can kind of have the real message off the [00:23:16] S1: screen and [00:23:17] S0: they won't realize. So I would argue the the key... I think there's a big difference between read only tools. Yeah. So like reading your messages in general fine. Yeah. But sending is actually pretty dangerous. Yeah. So I think there needs to be at the protocol level, a difference between read only and like, create update.