← Built In, the log
Govern 04 · A person commits AI desk Nov 7, 2026

Researchers show a browser extension could drive Claude Desktop through Dispatch and click its approvals

Forever Security showed that a script in a claude.ai tab could send tasks to Claude Desktop through Dispatch and auto-click every Allow prompt, and Anthropic is retiring Dispatch rather than changing its design. An approval a web page can click is not a person committing, so any agent path into IBM i should put the commit step outside the agent's own interface, under a named user profile, with the result in QAUDJRN.

Source: The Hacker News, Nov 6, 2026 · Malicious browser extensions could use Claude Dispatch to run code ↗Approved by Reggie

Built In.

The best of the log, every two weeks. One idea, one proof, one next step.

Built In.

The best of the log, every two weeks. One idea, one proof, one next step.

References do not imply endorsement. The link goes to the original source; the words are ours. Silver Lake Financial Group and Alder & Pine Home, where mentioned, are fictitious demonstration companies.