<p>（第一财经）12 月 4 日——腾讯控股的超级应用微信以及中国农业银行和中国建设银行的移动银行应用是字节跳动开发的新人工智能代理所阻止自动操作的多个应用之一。</p>
<p>一些新款努比亚 M153 智能手机的用户在网上表示，他们在斗宝移动助手尝试运行微信时被强制登出，并收到了 “登录环境异常” 的提示。此外，农业银行和中国建设银行的银行应用也显示弹出警告，提示用户在继续之前禁用该工具。</p>
<p>努比亚 M153 是中国电信设备和消费电子制造商中兴通讯开发的第一款智能手机，配备了斗宝移动助手。该手机于 12 月 1 日发布，售价为 3499 元人民币（495 美元），目前仅向开发者和行业专业人士提供。</p>
<p>针对这一问题，微信表示并未采取具体措施，暗示用户可能触发了现有的安全和风险控制措施。</p>
<p>斗宝移动助手的突出特点是能够在多个应用之间无缝切换，管理预订、下在线订单、下载批量文件、跨平台跟踪物流，并通过简单的用户语音命令回复消息。</p>
<p>行业技术人员指出，努比亚 M153 已授予斗宝移动助手高权限 INJECT_EVENTS，这通常仅保留给手机制造商开发的系统组件。这意味着该工具可以读取屏幕内容并模拟用户点击等功能。</p>
<p>一位技术人员表示：“斗宝移动助手本质上是作为操作系统的一部分设置的，而不是作为第三方软件。”</p>
<p>斗宝团队在微博上表示，没有黑客活动，INJECT_EVENTS 确实是系统级权限，斗宝移动助手需要用户授权才能使用该权限操作手机。该工具不会代表用户进行敏感授权，例如支付或身份验证，也不会将屏幕内容存储在云端进行训练。</p>
<p>安全公司 Knownsec 的首席安全官周景平表示，人工智能竞争的本质是手机制造商、模型开发者和传统应用开发者之间对私人数据的争夺。各方都在尝试实施人工智能解决方案，但互联网公司将数据视为生命线，不愿意让第三方应用获得高级权限。</p>
<p>12 月 1 日，云计算标准与开源推广委员会发布了代理交互安全指南，指出人工智能代理不得通过模拟用户行为绕过第三方应用的验证措施。然而，建立双重授权机制仍需要时间。</p>
<p>上个月，亚马逊对 Perplexity AI 提起诉讼，指控其基于浏览器的人工智能代理违反平台服务条款，代表谷歌用户进行购物。这家位于加利福尼亚的初创公司称亚马逊为 “恶霸”，并辩称用户有权独立使用人工智能工具。</p>
<p>编辑：马丁·卡迪耶夫</p>

<p>腾讯的微信以及中国农业银行和中国建设银行的银行应用已阻止字节跳动的新人工智能助手 Doubao Mobile Assistant 进行自动化操作。用户报告称被登出或收到警告。该人工智能工具集成在中兴的 Nubia M153 智能手机中，需要高级权限，引发了安全隐患。此事件突显了科技公司之间对数据访问的竞争。微信声称没有采取具体措施，将问题归因于现有的安全措施</p>

<p>(Yicai) Dec. 4 -- Tencent Holdings' super app WeChat and the mobile banking apps of Agricultural Bank of China and China Construction Bank are among several applications to have block automated operations by the new artificial intelligence agent developed by TikTok owner ByteDance.</p>
<div class="lb-trans"><p>（第一财经）12 月 4 日——腾讯控股的超级应用微信以及中国农业银行和中国建设银行的移动银行应用是字节跳动开发的新人工智能代理所阻止自动操作的多个应用之一。</p>
</div><p>Several users on the new Nubia M153 smartphone said online that they were forcibly logged out after the Doubao Mobile Assistant tried to run WeChat and were met with the message &#34;there is an abnormality in the login environment&#34; yesterday. In addition, the banking apps of AgBank and China Construction Bank display pop-up warnings, prompting users to disable the tool before proceeding.</p>
<div class="lb-trans"><p>一些新款努比亚 M153 智能手机的用户在网上表示，他们在斗宝移动助手尝试运行微信时被强制登出，并收到了 “登录环境异常” 的提示。此外，农业银行和中国建设银行的银行应用也显示弹出警告，提示用户在继续之前禁用该工具。</p>
</div><p>The Nubia M153 is the first smartphone developed by Chinese telecom equipment and consumer electronics maker ZTE and comes equipped with the Doubao Mobile Assistant. Launched on Dec. 1 at a price of CNY3,499 (USD495), it is currently only available to developers and industry professionals.</p>
<div class="lb-trans"><p>努比亚 M153 是中国电信设备和消费电子制造商中兴通讯开发的第一款智能手机，配备了斗宝移动助手。该手机于 12 月 1 日发布，售价为 3499 元人民币（495 美元），目前仅向开发者和行业专业人士提供。</p>
</div><p>In response to the issue, WeChat said that there were no specific actions taken on its part, suggesting that users might have triggered existing security and risk control measures.</p>
<div class="lb-trans"><p>针对这一问题，微信表示并未采取具体措施，暗示用户可能触发了现有的安全和风险控制措施。</p>
</div><p>The standout feature of the Doubao Mobile Assistant is its ability to switch seamlessly between multiple apps, manage bookings, place online orders, download batch files, track logistics across different platforms, and reply to messages, all through simple user voice commands.</p>
<div class="lb-trans"><p>斗宝移动助手的突出特点是能够在多个应用之间无缝切换，管理预订、下在线订单、下载批量文件、跨平台跟踪物流，并通过简单的用户语音命令回复消息。</p>
</div><p>The Nubia M153 has granted the Doubao Mobile Assistant the high-level INJECT_EVENTS permission, which is typically reserved for system components developed by the phone manufacturer, industry technicians pointed out. Having this means that the tool can read screen content and simulate user clicks, among other capabilities.</p>
<div class="lb-trans"><p>行业技术人员指出，努比亚 M153 已授予斗宝移动助手高权限 INJECT_EVENTS，这通常仅保留给手机制造商开发的系统组件。这意味着该工具可以读取屏幕内容并模拟用户点击等功能。</p>
</div><p>&#34;The Doubao Mobile Assistant is essentially set up as part of the operating system, rather than as third-party software,&#34; according to one technician.</p>
<div class="lb-trans"><p>一位技术人员表示：“斗宝移动助手本质上是作为操作系统的一部分设置的，而不是作为第三方软件。”</p>
</div><p>There is no hacking activity, with INJECT_EVENTS indeed being a system-level permission, and the Doubao Mobile Assistant requires users to grant authorization before it can use the permission to operate the phone, Doubao's team said on Weibo. The tool will not act on users' behalf for sensitive authorizations, such as payments or identity verification, and will not store screen content in the cloud for training, it added.</p>
<div class="lb-trans"><p>斗宝团队在微博上表示，没有黑客活动，INJECT_EVENTS 确实是系统级权限，斗宝移动助手需要用户授权才能使用该权限操作手机。该工具不会代表用户进行敏感授权，例如支付或身份验证，也不会将屏幕内容存储在云端进行训练。</p>
</div><p>The essence of the AI competition is a struggle for access to private data among phone makers, model developers, and traditional app developers, said Zhou Jingping, chief security officer of security firm Knownsec. Each party is attempting to implement AI solutions, but internet companies view data as their lifeline and are reluctant to allow third-party apps to gain high-level permissions, Zhou noted.</p>
<div class="lb-trans"><p>安全公司 Knownsec 的首席安全官周景平表示，人工智能竞争的本质是手机制造商、模型开发者和传统应用开发者之间对私人数据的争夺。各方都在尝试实施人工智能解决方案，但互联网公司将数据视为生命线，不愿意让第三方应用获得高级权限。</p>
</div><p>On Dec. 1, the Cloud Computing Standards and Open Source Promotion Committee released guidelines for agent interaction security, stating that AI agents must not bypass verification measures of third-party apps by simulating user behavior. However, establishing a dual authorization mechanism still requires time.</p>
<div class="lb-trans"><p>12 月 1 日，云计算标准与开源推广委员会发布了代理交互安全指南，指出人工智能代理不得通过模拟用户行为绕过第三方应用的验证措施。然而，建立双重授权机制仍需要时间。</p>
</div><p>Last month, Amazon filed a lawsuit against Perplexity AI, accusing its browser-based AI agent of shopping on behalf of Google users in violation of the platform's Terms of Service. The California-based startup called Amazon a &#34;bully&#34; and argued that users have the right to independently use AI tools.</p>
<div class="lb-trans"><p>上个月，亚马逊对 Perplexity AI 提起诉讼，指控其基于浏览器的人工智能代理违反平台服务条款，代表谷歌用户进行购物。这家位于加利福尼亚的初创公司称亚马逊为 “恶霸”，并辩称用户有权独立使用人工智能工具。</p>
</div><p>Editor: Martin Kadiev</p>
<div class="lb-trans"><p>编辑：马丁·卡迪耶夫</p>
</div>

WeChat, Some Chinese Banking Apps Block Access to ByteDance's New AI Agent

微信和一些中国银行应用程序阻止了对字节跳动新 AI 代理的访问