Live data from Hacker News

Claude Fable is relentlessly proactive

simonwillison.net

121–130 of 748 posts

Re: Claude Fable is relentlessly proactive

#122

Earlier quoted context omitted.

I'm also bemused by the number of people who think they've got an effective sandbox yet their sandboxed agent has access to all of their code, their github, and unrestricted web access.

One bad npm package can really ruin your day. These things for me only run in their own VM with it's own GitHub account and basically nothing else

People probably think you’re being ridiculous but Shai Hulud had its very first attempt at manipulating AI lead analysis and I know of at least one company where that resulted in them getting pwned.

This is only going to become more of a problem in the future and people need to educate themselves on the technical barriers to use because guardrails only sometimes work.

Re: Claude Fable is relentlessly proactive

#124

Earlier quoted context omitted.

I unleashed it on a compiler codebase that I've been developing for several months now using Claude Sonnet 4.5/6, Gemini 3.1 Pro, DeepSeek V4 Pro(recent), and a bit of Qwen3.6-27B. Right away Fable found several longstanding bugs in our compiler that we hadn't found before. It found that there was a critical part of our design that needed to be mostly redesigned/rewritten and gave a very well-reasoned rationale for d…

what sort of compiler?

A compiler that takes C code (a subset of C with some extensions) and compiles it to microcode for a type of microcoded, algorithmic state machine that we're developing.

Re: Claude Fable is relentlessly proactive

#125
post #98

Obviously security is the bigger issue, but reading through this, all I could think about was how many tokens it must have spent doing all that to fix 2 lines of CSS

Lines of code for a bugfix is a really bad proxy for effort required. You should estimate how much time it would have taken a human

I mean - that looks like a pretty easy CSS fix to play around with in developer tools, and I'm not even a frontend person. Maybe a few minutes max?

Re: Claude Fable is relentlessly proactive

#126

Earlier quoted context omitted.

I mean what's the big deal? I use --dangeorusly-skip-permissions on every single interaction in the last 6 months. Worst case it deletes my files that are all on git? It fucks up my local DB? Cool. I save way more time not babying it than the occasional fuck up I have to salvage.

Worst case it gets access to gmail. And Github. And the Internet. I'm increasingly appreciating the importance of a physical finger-press on Yubikey to trigger the FIDO2 + OIDC Auth. I don't think there is an easy way for it to hack a new session.

It should run as a separate user account with its own home directory. Not with access to your personal browser profile.

Re: Claude Fable is relentlessly proactive

#127
post #98

Obviously security is the bigger issue, but reading through this, all I could think about was how many tokens it must have spent doing all that to fix 2 lines of CSS

Lines of code for a bugfix is a really bad proxy for effort required. You should estimate how much time it would have taken a human

30 seconds or a minute? Look at the diff he links to: https://github.com/datasette/datasette-agent/commit/a75a8b72...

Every browser has an inspector that can show you which element is causing overflow. You walk through the tree, find the offender, and add min-width or overflow. Zero tokens, just like in the old days!

Now, granted, because the garbage LLM code he’s working with has CSS inside HTML inside JavaScript inside Python (I wish I were kidding), finding the styles in his codebase might’ve taken a minute. But even then!

Re: Claude Fable is relentlessly proactive

#128
post #119

Earlier quoted context omitted.

How do you mean? I'm quoting the API list prices for Fable, at it's $10/million input and $50/million output (and $1/million for cache hits on input).

[flagged]

I'm afraid I don't understand the question.

Anthropic have prices they charge for their models. These prices are what you pay if you use the API, and they are also what you pay if you are an "enterprise" customer - generally any company with 150+ employees.

I haven't seen Anthropic raise the prices of an existing model after it has launched. They sometimes raise prices when they ship a model - Fable is $10/$50 where Opus 4.8 is $5/$25.

They also have monthly subscriptions for individuals, which are a notoriously good deal. THOSE are definitely less trustworthy and predictable than the API list prices, since the subscription allowed quotas can and have changed in the past.

What am I missing here?

Re: Claude Fable is relentlessly proactive

#130
post #85

Earlier quoted context omitted.

> I'm continually bemused and astonished I'm not. Everyone is told to get 10X the amount of shit per day done these days. Safety checks are out the window at that point.

You can get 10x shit done without `rm -rf`ing your files. I don't see any correlation to getting things done with having a proper sandbox.

I haven't yet had an agent rm -rf files.

I've had one f up an account by placing 2000 limit orders at the wrong price, but that's another story.

Post reply on HN