Live data from Hacker News

Cowork: Claude Code for the rest of your work

claude.com

131–140 of 593 posts

Re: Cowork: Claude Code for the rest of your work

#131
post #117
post #26

People do realize that if they're doing this, they're not feeding "just" code into some probably logging cloud API but literally anything (including, as mentioned here, bank statements), right? Right? RIGHT?????? Are you sure that you need to grant the cloud full access to your desktop + all of its content to sort elements alphabetically?

Some do, some don't. The reality is there are some of us who truly just don't care. The convenience outweighs the negative. Yesterday I told an agent, "here's my api key and my root password - do it for me". Privacy has long since been dead, but at least for myself opsec for personal work is too.

I mean eventually, some adversarial entity will use this complete lack of defenses to hurt even the most privileged people in some way, so.

Unless of course they too turn to apathy and stop caring about being adversarial, but given the massive differences in quality of life between the west and the rest of the world, I'm not so sure about this.

That is of course a purely probabilistic thing and with that hard to grasp on an emotional level. It also might not happen during ones own lifetime, but that's where children would usually come in. Though, yeah, yeah, it's HN. I know I know.

Re: Cowork: Claude Code for the rest of your work

#132
Under the hood, is this running shell commands (or Apple events) or is it actually clicking around in the UI?

If the latter, I'm a bit skeptical, as I haven't had great success with Claude's visual recognition. It regularly tells me there's nothing wrong with completely broken screenshots.

Re: Cowork: Claude Code for the rest of your work

#133
post #24

I was hoping for a moment that this meant they had come up with a design that was safe against lethal trifecta / prompt injection attacks, maybe by running everything in a tight sandbox and shutting down any exfiltration vectors that could be used by a malicious prompt attack to steal data. Sadly they haven't completely solved that yet. Instead their help page at https://support.claude.com/en/articles/13364135-using-…

That's why I run it inside a sandbox - https://github.com/ashishb/amazing-sandbox

Does the lack of pip confuse Claude, that would seemingly be pretty big

Re: Cowork: Claude Code for the rest of your work

#134
post #24

I was hoping for a moment that this meant they had come up with a design that was safe against lethal trifecta / prompt injection attacks, maybe by running everything in a tight sandbox and shutting down any exfiltration vectors that could be used by a malicious prompt attack to steal data. Sadly they haven't completely solved that yet. Instead their help page at https://support.claude.com/en/articles/13364135-using-…

There's no AI that's secure and capable of doing anything an idiot would do on the internet with whatever data you give it. This is a perfect encapsulation of the same problem: https://www.reddit.com/r/BrandNewSentence/comments/jx7w1z/th... Substitute AI with Bear

[deleted]

Re: Cowork: Claude Code for the rest of your work

#135
post #79

Is there anything similar to this in the local world? I’m setting up a full local “ai” stack on a 48gb MacBook for my sensitive data ops. Using webui. Will still use sota cloud services for coding.

There are lots of similar tools to Claude Code where a local executor agent talks to a remote/local AI. For example, OpenCode and Aider both support local models as well as remote (e.g. via OpenRouter).

Re: Cowork: Claude Code for the rest of your work

#136
post #87

Earlier quoted context omitted.

Everything on a ZFS/BTRFS partition with snapshots every minute/hour/day? I suppose depending on what level of access the AI has it could wipe that too but seems like there's probably a way to make this work.

The topic of the discussion is something that parents, grandmas, and non technical colleagues would realistically be able to use.

A "revert filesystem state to x time" button doesn't seem that hard to use. I'm imagining this as a potential near-term future product implementation, not a home-brewed DIY solution.

Re: Cowork: Claude Code for the rest of your work

#137
post #119

Hi, Felix from the team here, this is my product - let us know what you think. We're on purpose releasing this very early, we expect to rapidly iterate on it. (We're also battling an unrelated Opus 4.5 inference incident right now, so you might not see Cowork in your client right away.)

Your terms for Claude Max point to the consumer ToS. This ToS states it cannot be used for commercial purposes. Why is this? Why are you marketing a product clearly for business use and then have terms that strictly forbid it. I’ve been trying to reach a human at Anthropic for a week now to clarify this on behalf of our company but can’t get past your AI support.

Speaking from experience the support is mostly automated it seems and it takes 2 weeks to reach a real human (could be more now). Vast majority of reddit threads also say similar timelines.

Re: Cowork: Claude Code for the rest of your work

#138
post #24

I was hoping for a moment that this meant they had come up with a design that was safe against lethal trifecta / prompt injection attacks, maybe by running everything in a tight sandbox and shutting down any exfiltration vectors that could be used by a malicious prompt attack to steal data. Sadly they haven't completely solved that yet. Instead their help page at https://support.claude.com/en/articles/13364135-using-…

That's one thing. Another would be introducing homomorphic encryption in order for companies and people using their models to stay compliant and private. I can't believe it's such an under-researched area in AI.

Re: Cowork: Claude Code for the rest of your work

#139

Earlier quoted context omitted.

TimeMachine is worthless trash compared to restic

Please elaborate

It works on Linux, Windows, macOS, and BSD. It's not locked to Apple's ecosystem. You can back up directly to local storage, SFTP, S3, Backblaze B2, Azure, Google Cloud, and more. Time Machine is largely limited to local drives or network shares. Restic deduplicates at the chunk level across all snapshots, often achieving better space efficiency than Time Machine's hardlink-based approach. All data is encrypted client-side before leaving your machine. Time Machine encryption is optional. Restic supports append-only mode for protection against ransomware or accidental deletion. It also has a built-in check command to check integrity.

Time Machine has a reputation for silent failures and corruption issues that have frustrated users for years. Network backups (to NAS devices) use sparse bundle disk images that are notoriously fragile. A dropped connection mid-backup can corrupt the entire backup history, not just the current snapshot. https://www.google.com/search?q=time+machine+corruption+spar...

Time Machine sometimes decides a backup is corrupted and demands you start fresh, losing all history. Backups can stop working without obvious notification, leaving users thinking they're protected when they're not. https://www.reddit.com/r/synology/comments/11cod08/apple_tim...

The shift from HFS+ to APFS introduced new bugs, and local snapshots sometimes behave unpredictably. https://www.google.com/search?q=time+machine+restore+problem...

The backup metadata database can grow unwieldy and slow, eventually causing failures.

https://www.reddit.com/r/MacOS/comments/1cjebor/why_is_time_...

https://www.reddit.com/r/MacOS/comments/w7mkk9/time_machine_...

https://www.reddit.com/r/MacOS/comments/1du5nc6/time_machine...

https://www.reddit.com/r/osx/comments/omk7z7/is_a_time_machi...

https://www.reddit.com/r/mac/comments/ydfman/time_machine_ba...

https://www.reddit.com/r/MacOS/comments/1pfmiww/time_machine...

https://www.reddit.com/r/osx/comments/lci6z0/time_machine_ex...

Time Machine is just garbage for ignorant people.

Re: Cowork: Claude Code for the rest of your work

#140
post #119

Earlier quoted context omitted.

Your terms for Claude Max point to the consumer ToS. This ToS states it cannot be used for commercial purposes. Why is this? Why are you marketing a product clearly for business use and then have terms that strictly forbid it. I’ve been trying to reach a human at Anthropic for a week now to clarify this on behalf of our company but can’t get past your AI support.

> Why are you marketing a product clearly for business use Huh? Their "individual" plans are clearly for personal use.

Is that why you can enter a business id on the payment form? Just read the marketing page [0]. The whole thing is aimed at people running a business or operating within one.

[0] https://claude.com/pricing/max

Post reply on HN