Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Claude Code 2.0

npmjs.com

Post reply on HN
Print view View original

391–400 of 431 posts

Re: Claude Code 2.0

#391

Post by brulard »

hiatus wrote: post #354
saberience wrote: post #320

Earlier quoted context omitted.

But this is just like giving a junior engineer access to a prod K8s cluster and having them work for hours on stuff related to said cluster... you wouldn't do it. Or at least, I wouldn't do it. In my own career, when I was a junior, I fucked up a prod database... which is why we generally don't give junior/associate people to much access to critical infra. Junior Engineers aren't "dangerous" but we just don't give th…

> Junior Engineers aren't "dangerous" but we just don't give them too much access/authority too soon. If it is not dangerous to give them this access, why not grant it?

what value would that provide? If we give claude code access, even though very risky, it can provide value, but what upside is to letting junior to production?

Re: Claude Code 2.0

#392

Post by guhcampos »

tesch1 wrote: post #329
guhcampos wrote: post #315

Earlier quoted context omitted.

It is dangerous. Just yesterday my cursor agent made some changes to a live kubernetes cluster even over my specific instruction not to. I gave it kubectl to analyze and find the issues with a large Prometheud + AlertManager configuration, then switched windows to work on something else. When I was back the MF was patching live resources to try and diagnose the issue.

May I gently suggest isolating production write credentials from the development environment?

I was diagnosing an issue in production. The idea was to have the LLM would need to collect the logs of a bunch of pods, compare the YAML code in the cluster with the templates we were feeding ArgoCD, then check why the original YAML we were feeding the cluster wasn't giving the results we expected (after several layers of templating between ArgoCD Appsets, ArgoCD Applications, Helm Charts and Prometheus Operator).

I have a cursor rule stating it should never make changes to clusters, and I have explicitly told it not to do anything behind my back.

I don't know what happened in the meantime, maybe it blew up its own context and "forgot" the basic rules, but when I got back it was running `kubectl patch` to try some changes and see if it works. Basically what a human - with the proper knowledge - would do.

Thing is: it worked. The MF found the templating issue that was breaking my Alertmanager by patching and comparing the logs. All by itself, however by going over an explicit rule I had given it a couple times.

So to summarize: it's useful as hell, but it's also dangerous as hell.

Re: Claude Code 2.0

#393

Post by guhcampos »

bakies wrote: post #373
guhcampos wrote: post #315

Earlier quoted context omitted.

It is dangerous. Just yesterday my cursor agent made some changes to a live kubernetes cluster even over my specific instruction not to. I gave it kubectl to analyze and find the issues with a large Prometheud + AlertManager configuration, then switched windows to work on something else. When I was back the MF was patching live resources to try and diagnose the issue.

yeah claude is really eager to apply stuff directly to the cluster to the wrong context even with constant reminding that it rolls out through gitops. I think there's a way to restrict more than "kubectl" so you can allow get/describe but not apply.

Exactly. I'll need to dig deeper into its allowlist and try a few things.

Problem is: I also force it to run `kubectl --context somecontext`, as to avoid it using `kubectl config use-context` and pull a hug on me (if it switches the context and I miss it, I might then run commands against the wrong cluster by mistake). I have 60+ clusters so that's a major problem.

Then I'd need a way to allowlist `kubectl get --context`, `kubectl logs --context` and so on. A bit more painful, but hopefully a lot safer.

Re: Claude Code 2.0

#394

Post by giancarlostoro »

paradite wrote: post #242

Claude Code can actually do much more than just coding. You can use it for writing, data processing, admin work, file management, etc. I compiled a list of non-coding use cases for Claude Code here: https://github.com/paradite/claude-code-is-all-you-need

I'm probably going to add reverse engineering old video games to that list. ;)

Re: Claude Code 2.0

#395

Post by simonw »

mehdibl wrote: post #385
simonw wrote: post #380

Earlier quoted context omitted.

If you don't fetch data from external sources then you're safe from prompt injection. But that's a very big if . I've seen Claude Code attempt to debug a JavaScript issue by running curl against the jsdelivr URL for a dependency it's using. A supply chain attack against NPM (and those aren't exactly rare these days) could add comments to code like that which could trigger attacks. Ever run Claude Code in a folder tha…

This is quite convoluted. Not seen in the wild and comments don't trigger prompt injection that easily. Again you likely use vscode. Are you checking each extension you download? There is already a lot of reported attacks using vscode. A lot of noise over MCP or tools hypothetical attacks. The attack surface is very narrow, vs what we already run before reaching Claude Code. Yes Claude Code use curl and I find it qui…

I know it's not been seen in the wild, which is why it's hard to convince people to take it seriously.

Maybe it will never happen? I find that extremely unlikely though. I think the reason it hasn't happened yet is that widespread use of agentic coding tools only really took off this year (Claude Code was born in February).

I expect there's going to be a nasty shock to the programming community at some point once bad actors figure out how easy it is to steal important credentials by seeding different sources with well crafted malicious attacks.

Re: Claude Code 2.0

#396

Post by brulard »

navanchauhan wrote: post #84

You have to specify `/model sonnet[1m]` to get the 1 million context version

Be careful. exceeding around the original 200k tokens leads to worse and worse results. It's important to have context clean and tailored to the current task.

Re: Claude Code 2.0

#397

Post by arjie »

Gigachad wrote: post #262
arjie wrote: post #239

Earlier quoted context omitted.

I simply did not know you could do that with videos. TIL!

I got a laugh out of this. Using an LLM to crop a video does feel like dropping a nuke to hammer in a nail.

It isn't even the worst I've done. I've dumped a table in ChatGPT and asked it to CSVize it and do some trivial operations on the table. This is straightforward to do in Google Sheets. It is very much like that: boiling an ocean to get some tea.

Re: Claude Code 2.0

#398

Post by arjie »

arjie wrote: post #157
pimeys wrote: post #118

Earlier quoted context omitted.

You could try to use a router. I'm currently building this: https://github.com/grafbase/nexus/ If croq talks openai API, you enable the anthropic protocol, and openai provider with a base url to croq. Set ANTHROPIC_BASE_URL to the open endpoint and start claude. I haven't tested croq yet, but this could be an interesting use case...

I assumed that OpenRouter wouldn't deliver the same tokens/second which seems to have been a complete mistake. I should have tried it to see. I currently use `ANTHROPIC_BASE_URL` and `ANTHROPIC_AUTH_TOKEN` with z.ai and it works well but CC 2.0 now displays a warning Auth conflict: Both a token (ANTHROPIC_AUTH_TOKEN) and an API key (/login managed key) are set. This may lead to unexpected behavior. • Trying to use AN…

However, after a day of using Crush with Qwen-3-480B-coder I am disappointed and will be canceling my Cerebras subscription. The model + agent pair is substantially worse than Claude Code with Sonnet 4 and I am going to have return to the latter. Qwen-3 in my workflow requires a lot of handholding and review and the gains from rapid generation are ruined by the number of errors in generated code.

Crush is also not a good assistant. It does not integrate scrollback with iTerm2 so I can't look at what the assistant did. The pane that shows the diff side by side is cool but in practice I want to go see the diff + reasoning afterwards so I can alter sections of it more easily and I can't do that.

Re: Claude Code 2.0

#399

Post by arjie »

dpkirchner wrote: post #174
arjie wrote: post #156

Earlier quoted context omitted.

When they announced this I went to try it and they only work with Cline really (which is what they promote there) but Cline has this VSCode dependency as far as I know and I don't really like that. I have my IDE flow and my CLI flow and I don't want to mix them. But you're right, they have an OpenAI compatible API https://inference-docs.cerebras.ai/resources/openai so perhaps I can actually use this in the CLI! Thank…

I'm using Cerebras's MCP with Claude Code and it works mostly OK. CC doesn't send updates through the MCP by default (as far as I can tell) so I have to add an instruction to CLAUDE.md to tell it to always send code creation and updates through the Cerebras MCP, which works pretty well.

This is an interesting idea. Since I have the subscription for the rest of a month, I'll give it a crack. Wasn't impressed by the Qwen-3 model, though.

Re: Claude Code 2.0

#400

Post by OddMerlin »

How is this any different from just using claude-cli? The example on the npm page is something you could easily do from within claude-cli...? Sorry, I must be missing the point on this??
Post reply on HN