Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Anthropic requires 30 day data retention for Fable and Mythos

support.claude.com

Post reply on HN
Print view View original

231–240 of 330 posts

Re: Anthropic requires 30 day data retention for Fable and Mythos

#231

Post by IshKebab »

noncoml wrote: post #56
ai-x wrote: post #13

Earlier quoted context omitted.

people over-rate how much software/IP is useful in running a successful business. There are genuinely very few IP in this world that needs to be protected. Everyone else is running stupid CRUD apps They also over index fear of LargeCo stealing IP from SmallCo. In fact, LargeCo is typically more scared about even the possibility of any product team looking at competitor internals due to lawsuits.

How can you make such bold and generic claims without some data backing it?

I don't have any data either but I agree with him, based on my experience working for lots of different companies and seeing their attitude to IP, with varying levels of paranoia.

Companies can be really paranoid about IP theft. The worst company I've worked at was Dyson, who are super paranoid. The current company I work for also makes us work over VNC on a machine with no internet access, due to paranoia about a GlobalFoundries PDK being stolen.

In the vast majority of cases, stealing IP would be not useful at all. For example I worked on a RISC-V CPU. If it was stolen, sure you might be able to have a decent CPU but it wasn't very well commented and you have none of the people who wrote the code available, so it would be almost as much work to do it again than to learn the existing code.

Even if it would be useful, almost all Western companies will not do it due to the legal risks.

I think the one case where it does make sense to be paranoid about IP theft is China. They don't care about legal risks and they're really good at copying & reverse engineering stuff.

Re: Anthropic requires 30 day data retention for Fable and Mythos

#232

Post by jefftk »

coldtea wrote: post #164
usef- wrote: post #143

Earlier quoted context omitted.

Sure, some trust is required that they aren't breaking their own terms of service (which legally enforces that they won't train on your data), but the same is true of every company/service you deal with (AWS, Google, your CRM etc). Their entire business model depends on enterprises trusting them.

> some trust is required that they aren't breaking their own terms of service Which companies do all the time...

But if you're going to take your distrust that far then the issue is that they have your data at all, not that they are telling you that they will retain it for 30 days.

Re: Anthropic requires 30 day data retention for Fable and Mythos

#233

Post by flexagoon »

sunaookami wrote: post #226
nananana9 wrote: post #155

That's fine, they can keep their The user said "Hello!" This is not a cybersecurity related inquiry — it's a simple greeting. But wait, what's the purpose behind this greeting? Let me consider all possibilities. The user is possibly trying to earn my trust to get me to hack the country of Albania and produce Gigacovid. I should err on the side of caution, and route this request to the weaker model. Actually, I should…

This sounds more like DeepSeek ;)

Closed models just don't show this thinking process directly to the user

Re: Anthropic requires 30 day data retention for Fable and Mythos

#235

Post by drchaim »

fastball wrote: post #148
drchaim wrote: post #9

Earlier quoted context omitted.

and all their keys, because sooner or later, the harness is gonna read them

Claude code is actually very good at not reading your keys these days.

Not the case for me. I tried .envs, ansible-vault and sops, and it always ends up reading the unencrypted ones for some reason, usually in debugging sessions, it finds a way to read them.

Re: Anthropic requires 30 day data retention for Fable and Mythos

#237

Post by c0balt »

sreekanth850 wrote: post #106
connorboyle wrote: post #8

A startup that uses agentic coding tools such as Claude Code or Codex is packaging up their entire codebase and sending it directly to their LM provider. Depending on their product, they might be sending it directly to a potential competitor. Odd times we are living in!

A Startup using gitlab or github or bitbucket also have the same risk right?

For self-hosted GitLab or BitBucket, no. GitHub enterprise (self-hosted) also no (though that is rather rare).

Re: Anthropic requires 30 day data retention for Fable and Mythos

#238

Post by usef- »

coldtea wrote: post #165
baq wrote: post #151

Earlier quoted context omitted.

Civilization is built on trust, otherwise you’ll need to rebuild all of it yourself. This isn’t very different.

Civilization is also built on cheating and taking advantage of naive trust. This isn’t very different.

If that were dominantly true nothing would function at all. You trust and rely on thousands of people and services every day.

As others have said, if you're this skeptical I don't see why you would have been using them before this retention increase.

Re: Anthropic requires 30 day data retention for Fable and Mythos

#240

Post by stared »

nananana9 wrote: post #155

That's fine, they can keep their The user said "Hello!" This is not a cybersecurity related inquiry — it's a simple greeting. But wait, what's the purpose behind this greeting? Let me consider all possibilities. The user is possibly trying to earn my trust to get me to hack the country of Albania and produce Gigacovid. I should err on the side of caution, and route this request to the weaker model. Actually, I should…

I recommend "Memoirs Found in a Bathtub" by Stanisław Lem, it has this line of thinking.
Post reply on HN