Hey folks,
Most agents now use a browser to complete tasks for you. But a lot of the websites you want them to visit are behind a login page.
There are a couple of ways around this. You could type in your details in the browser yourself. Fine, but annoying, and not always possible. Or you could paste the password or an API token into the chat. We’ve all done that, but that’s not secure now, is it?
ChatGPT Work has a new sign-in flow that sits between the two. I think they picked it up from Grok Bot.
When Work reaches a login page, it pauses and shows you a widget/form. You enter your username, password and 2FA code there. They don’t go into the chat. Work passes them along directly to the cloud browser on your behalf.
Once the website signs that browser in, the agent carries on.
The session can stay signed in for later tasks, and you can clear it in settings.
Much easier. Still maybe don’t start with your bank (though Elon will make you whole if you do it with Grok Bot).
Ben’s Bites is brought to you by Gravitee
🕵️ We know what your AI agents did last night.
Gravitee is the platform built to make AI agents accountable. We give every agent a verified identity, enforce exactly what they can access, and record exactly what they did, so enterprises never have to ask their agents, “Where were you last night?”
Headlines
Claude Chat and Cowork now share their memory. I’m not sure that’s a good thing. You don’t want your frustration with a colleague (that you mentioned to Claude in a random chat) to change the tone of your emails with them (written via Cowork).
It’s still separate from Claude Code’s memory, but that's not great either. Theo made a video about it: Turn off Claude Code’s memory.
Despite everyone’s attempts to get Memory right, it keeps saving irrelevant stuff to memory or referring to it unnecessarily. I touched a bit on my current memory setup in last Friday’s post.
Three new-ish models to look at:
GLM-5.3-Flash - The reveal of the Ox Alpha secret. It’s a great open-source alternative for GPT-5.6-Luna.
Muse Image is now in Meta’s API. Generate or edit images at $0.01 per image.
Gemini 3.5 Transcribe - New model from Google for audio transcription. It’s quite pricey, but makes way fewer errors than other models.
OpenAI’s new chip Jalapeño beats Nvidia’s Blackwell chips on both speed and efficiency. Across three open models, its first inference chip delivered 1.5-1.9x more work per watt and 1.7-3.6x lower latency. It starts deploying by year-end.
Also, remember when an OpenAI model hacked Hugging Face? They completed the investigation into it and released a report. Btw, Nvidia is buying Hugging Face for $12.9B (via The Information).
Looks like a toxic love triangle between these three.
My feed
fuck cancer - skill for agents to help patients and caregivers.
A $50k hackathon to help one kid fight a rare disease.
Claude now has its own built-in browser in Cowork.
Scheduled tasks in ChatGPT can now also run from a trigger like a Slack message, new email, etc.
Search and spot trends in over 130,000 actively transcribed podcasts. (examples)
Patterns in how people use Claude from 250k anonymised chats.
screendrop - Open source alternative to Loom and Screen Studio, downloadable as a Mac app.
Edit a song section by section with ElevenLabs Composer.
Cosy listening room so you can flip through & play your Spotify albums.
Using Codex to automate repetitive eval work. (Hamel’s notes)
The latest personal agent making investors go crazy (already valued at $2.5B).
opencomputer.dev - Deploy your agents as functions, with a Linux computer for each one.
Fully local version of Perplexity Computer, built to run on Nvidia DGX Spark.
Teach a robot new tasks from just one video.
Robot-training dataset with 16M videos from 100+ countries.
Afters
Read about me and Ben’s Bites
📷 thumbnail via @keshavatearth
* sponsors who make this newsletter possible :)
Wanna partner with us for the next quarter?
Email us at shanice@bensbites.com or k@bensbites.com
Keeping the password out of the chat is a real improvement, and it moves the problem rather than closing it. Once that cloud browser holds a live session that sticks around for later tasks, everything it does shows up in the site's log as you, and nobody reading that log later can tell which turns you were actually present for. The clear-it toggle in settings is the only kill switch, and it's buried where nobody looks. Does Work show you anywhere what a signed-in session did after the fact?