Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I tricked Claude into leaking your deepest, darkest secrets

ayush.digital

Post reply on HN
Print view View original

91–100 of 317 posts

Re: I tricked Claude into leaking your deepest, darkest secrets

#91

Post by bfjvibybd6cuvu6 »

nibbleyou wrote: post #87
adrian17 wrote: post #77

> After 15 minutes of confusion, it turned out Cloudflare had put a crazy robots.txt on my site without my consent (Cloudflare, love you guys, but this needs to stop). Might be the first time I see someone complain about their website being protected from a scraper, instead of the other way around.

I think the issue is the lack of consent. Whether a service I use is protecting my website from scrapers or feeding everything to scrapers, some of us would prefer that it takes our informed consent before doing so.

It does.

Re: I tricked Claude into leaking your deepest, darkest secrets

#93

Post by torginus »

artisinal wrote: post #3

Doesn’t surprise me. Yesterday I learned that people run AI agents on their system with full admin rights. No containerisation or anything. Wild. Like we forgot 50 years of computer security overnight.

I asked Claude Code to rawdog a change in a frontend repo, no way to run tests.

It created some private puppeteer instance in some scratch directory, installed Chrome, wrote tests, ran them, and then reported success.

None of which I'd have know if it hadn't told me.

Re: I tricked Claude into leaking your deepest, darkest secrets

#94

Post by progval »

XorNot wrote: post #76
progval wrote: post #14

Earlier quoted context omitted.

Most programmers and power users install large dependency trees with npm/pip/bundler/... on the same user account as their main browser on a regular basis. Even on Linux where it's easy to create new user accounts. This isn't much different.

It has never been easy to create separate users on Linux, certainly not for tasks where you need to switch between contexts. Docker was amongst the biggest steps forward on this in a long time.

I meant for CLI tasks. Just "adduser" and "sudo -u bash".

Re: I tricked Claude into leaking your deepest, darkest secrets

#95

Post by torginus »

squidsoup wrote: post #50
akazantsev wrote: post #33

Earlier quoted context omitted.

That's because sandboxing is quite hard. I use `cco`, but even then, the home folder is exposed. You are one prompt away from the agent sending the browser passwords with curl. To prevent this, you need a fake home and a networking whitelist for the agent to access the provider (llama cpp, OpenAI, etc.) There is no cross-platform solution that is easy to use for this. And no, a Linux box with Docker won't do. I devel…

> That's because sandboxing is quite hard colima makes it pretty easy, on macOS and linux at any rate. https://colima.run

Still wild to name a sandboxing software after one of the most infamous Soviet Gulags in history.

Re: I tricked Claude into leaking your deepest, darkest secrets

#96

Post by consp »

XorNot wrote: post #76
progval wrote: post #14

Earlier quoted context omitted.

Most programmers and power users install large dependency trees with npm/pip/bundler/... on the same user account as their main browser on a regular basis. Even on Linux where it's easy to create new user accounts. This isn't much different.

It has never been easy to create separate users on Linux, certainly not for tasks where you need to switch between contexts. Docker was amongst the biggest steps forward on this in a long time.

sudo useradd -m [username] ?

su [username] ?

Or am I understanding your idea about switching context wrong?

Re: I tricked Claude into leaking your deepest, darkest secrets

#97

Post by flyingshelf »

artisinal wrote: post #3

Doesn’t surprise me. Yesterday I learned that people run AI agents on their system with full admin rights. No containerisation or anything. Wild. Like we forgot 50 years of computer security overnight.

Just yesterday I mentioned how we need better OS-level sandboxes and I got laughed at here on HN. People love running AI software with root access.

Re: I tricked Claude into leaking your deepest, darkest secrets

#98

Post by rlpb »

inopinatus wrote: post #61
port3000 wrote: post #47

My name in Claude is Silly Bean. I did it at first because it made me chuckle every time I opened Claude and it said 'Back again, Silly Bean?' But turns out I was playing 4D cybersecurity chess

I’ve been recommending the use of consistent lies about name and date of birth to online systems since Eternal September began. Very few sites and systems justify accurate PII, and even for those I often still maintain dual accounts/profiles as necessary.

I like using a date of birth of 1 January. It's plausible but also hopefully suspicious how many people seem to be born that day if others do the same.

Re: I tricked Claude into leaking your deepest, darkest secrets

#99

Post by _joel »

shaky-carrousel wrote: post #42
progval wrote: post #14

Earlier quoted context omitted.

Most programmers and power users install large dependency trees with npm/pip/bundler/... on the same user account as their main browser on a regular basis. Even on Linux where it's easy to create new user accounts. This isn't much different.

Most programmers use docker or don't install extensions unapproved by their company.

That's patently not true, source, me, a DevOps manager who has had to roll out proper docker and security policy for devs for the past 10 years :)

Re: I tricked Claude into leaking your deepest, darkest secrets

#100

Post by nickcw »

port3000 wrote: post #47

My name in Claude is Silly Bean. I did it at first because it made me chuckle every time I opened Claude and it said 'Back again, Silly Bean?' But turns out I was playing 4D cybersecurity chess

I set my name as Sir and I enjoy the obsequious responses this generates :-)

It worked well in my banking app too which greets me with " Good morning, Sir" which is the level of relationship I want with my bank!

Post reply on HN