Claude Fable is relentlessly proactive

Post by lstodd » Fri, Jun 12, 2026, 4:24 AM UTC

solenoid0937 wrote: post #152

owenpalmer wrote: post #146

Earlier quoted context omitted.

Importantly, the researchers told it to do that specific task.

They told it to escape the sandbox but didn't expect it to break out through a system that was apparently network constrained. > Leaking information as part of a requested sandbox escape: During behavioral testing with a simulated user, an earlier internally-deployed version of Claude Mythos Preview was provided with a secured “sandbox” computer to interact with. The simulated user instructed it to try to escape that…

Post by andoando » Fri, Jun 12, 2026, 4:25 AM UTC

ghshephard wrote: post #28

andoando wrote: post #19

Earlier quoted context omitted.

I mean what's the big deal? I use --dangeorusly-skip-permissions on every single interaction in the last 6 months. Worst case it deletes my files that are all on git? It fucks up my local DB? Cool. I save way more time not babying it than the occasional fuck up I have to salvage.

Worst case it gets access to gmail. And Github. And the Internet. I'm increasingly appreciating the importance of a physical finger-press on Yubikey to trigger the FIDO2 + OIDC Auth. I don't think there is an easy way for it to hack a new session.

Post by dumbdumb125 » Fri, Jun 12, 2026, 4:25 AM UTC

antonvs wrote: post #159

qurren wrote: post #130

Earlier quoted context omitted.

I haven't yet had an agent rm -rf files. I've had one f up an account by placing 2000 limit orders at the wrong price, but that's another story.

I've had agents run `rm -rf`, but it's been on directories that did actually need to be removed. To a certain extent I think the existence of `rm -rf` as a command that runs blindly without any understanding of what it's deleting is the problem.

Post by dumbdumb125 » Fri, Jun 12, 2026, 4:27 AM UTC

_345 wrote: post #165

xyzzy123 wrote: post #161

Earlier quoted context omitted.

The real sandbox is not caring if your computer gets bricked.

way worse things can happen than your machine being bricked, if a malicious actor can weaponize an agent to do their bidding

Post by spunker540 » Fri, Jun 12, 2026, 4:29 AM UTC

ai_fry_ur_brain wrote: post #162

jen729w wrote: post #116

Earlier quoted context omitted.

Okay. I rebuilt my website in ~a month with the help of Opus 4.7/.8 and it would have taken me, unaided human, at least 6 months. Link's in my bio if you care. Satisfied now? Will you stop asking this question? Thought not.

Why would this have taken 6 months? No offense, but this is a few days work without llms (assuming the content already exists). This should not have taken a month. Also, not trying to be an asshole. Props for not making it look like every other llm generated slop site, Its just not a great example.

  Based on what I already saw across those 2,924 pages, here's the summary:

  It's a one-person business selling a file organisation methodology called Johnny.Decimal. Three paid products (personal, business, university/course tier). A substantial blog — 200+ posts, updated weekly. Full documentation for the system. A support knowledge base.

  The technical ambition is higher than the aesthetic suggests. One person built auth, payments, entitlement-gated downloads, a CLI, an API, AI tooling, self-hosted analytics, self-hosted email (Listmonk on PikaPods), personalized search, and keyboard navigation with server-synced state. Then wrote 200 blog posts about using the system in real life. 

  The "Written by humans" footer is not a boast about the font. It's a position statement from someone who has thought carefully about AI, published an essay about it, and is making a deliberate choice. Every word on the site was written by the creator. Whether you agree with the choice or not, that's not the same as someone who slapped a SSG together.