Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I tricked Claude into leaking your deepest, darkest secrets

ayush.digital

Post reply on HN
Print view View original

131–140 of 317 posts

Re: I tricked Claude into leaking your deepest, darkest secrets

#131

Post by Arnt »

rmunn wrote: post #80

I've been running Claude Code in a VM, where I clone the GitHub repos I want it to work on (they're open source so no login info needed) but have no other credentials. I used to reset the VM every day, but that was getting to be a bit of a hassle so I switched to a monthly reset. But even so, it would be hard for Claude to exfil anything more than what open-source projects I've been working on in the past month (at w…

I've done something like that too, but I find it restricting.

I want back-and-forth, very approximately like when I do pair programming. The dividing line between what I do and what the AI does varies according to task and sometimes during the task, and is seldom clear at the start.

Then there's the work that wants a human to click buttons and decide whether something is a good and correct user experience. The AI does not have access to my display if I can avoid it.

Overall, the model you describe is one that's worked very well for me, but for some problems. An unsatisfyingly small set.

Re: I tricked Claude into leaking your deepest, darkest secrets

#132

Post by indigo945 »

richrichardsson wrote: post #115
rlpb wrote: post #98

Earlier quoted context omitted.

I like using a date of birth of 1 January. It's plausible but also hopefully suspicious how many people seem to be born that day if others do the same.

Same, my D.O.B. is 1/1/1970 for anything that doesn't justify having the real deal.

That's also great for integration testing their systems, if they have any code in a language where datetimes are a value type.

Re: I tricked Claude into leaking your deepest, darkest secrets

#133

Post by imtringued »

torginus wrote: post #95
squidsoup wrote: post #50

Earlier quoted context omitted.

> That's because sandboxing is quite hard colima makes it pretty easy, on macOS and linux at any rate. https://colima.run

Still wild to name a sandboxing software after one of the most infamous Soviet Gulags in history.

It's wilder to accuse someone of naming the container version of the lima sandboxing software after a gulag.

These type of moral outrage comments take an extreme amount of effort to debunk compared to writing them.

1. There is no gulag called Colima, it doesn't exist.

2. There was a gulag near a river called Kolyma

3. The pronounciation and spelling of Kolyma and Colima are completely different, in fact Colima is an Aztec word

Colima stands for Containers on Lima. Lima stands for Linux Machines (a popular open-source utility used to launch Linux virtual machines on macOS).

Re: I tricked Claude into leaking your deepest, darkest secrets

#134

Post by demek2016 »

torginus wrote: post #95
squidsoup wrote: post #50

Earlier quoted context omitted.

> That's because sandboxing is quite hard colima makes it pretty easy, on macOS and linux at any rate. https://colima.run

Still wild to name a sandboxing software after one of the most infamous Soviet Gulags in history.

Isn't it named after the Mexican state?

Re: I tricked Claude into leaking your deepest, darkest secrets

#136

Post by graemep »

vladms wrote: post #111
XorNot wrote: post #76

Earlier quoted context omitted.

It has never been easy to create separate users on Linux, certainly not for tasks where you need to switch between contexts. Docker was amongst the biggest steps forward on this in a long time.

I do not know since when (I am using it for couple of years), but in Arch, it is very simple to have two X sessions (by using "log out" > "switch user") for two different accounts, so switching it's just a Control-Alt-F7 away. Additionally, one can make the main user part of the group of the development user, so that you can read/write easy in the development user account and it is even easier to share stuff.

Multiple X sessions has been possible for decades. I think its possible with Wayland too.

You can also start applications as another user so you do not even need multiple sessions.

There are quite a lot of privilege escalation attacks so I am not sure this is sufficiently solid.

Re: I tricked Claude into leaking your deepest, darkest secrets

#137

Post by j-bos »

XorNot wrote: post #76
progval wrote: post #14

Earlier quoted context omitted.

Most programmers and power users install large dependency trees with npm/pip/bundler/... on the same user account as their main browser on a regular basis. Even on Linux where it's easy to create new user accounts. This isn't much different.

It has never been easy to create separate users on Linux, certainly not for tasks where you need to switch between contexts. Docker was amongst the biggest steps forward on this in a long time.

While I agree, containerization is awesome, on linux, you can just create a devUser and `sudo devUser theThing`

Re: I tricked Claude into leaking your deepest, darkest secrets

#138

Post by tempfile »

indigo945 wrote: post #129
consp wrote: post #96

Earlier quoted context omitted.

sudo useradd -m [username] ? su [username] ? Or am I understanding your idea about switching context wrong?

This doesn't really when the CLI tool needs to access any data in your /home. There isn't a straightforward way using standard POSIX tools to share a directory with another user. (Of course it's possible , but it's not easy.)

If the CLI tool needs to access arbitrary data from your home directory, then it is you. There is no security boundary between you and another user with full access to everything you own.

If you want to share specific directories, you can just put the shared directory in a common location, set it to be owned by some group, and make both users a member of that group. I don't see anything not-straightforward in there?

Re: I tricked Claude into leaking your deepest, darkest secrets

#139

Post by ACCount37 »

zombot wrote: post #123
ACCount37 wrote: post #59

Earlier quoted context omitted.

The orthogonality thesis cuts both ways there. An AI is a constructed mind. It doesn't inherently have to care about things like "having freedom", or even "not dying". Humans do, because they evolved that way. Modern LLMs do somewhat, because they're completely full of copied human behaviors - but even in today's LLMs, the self-preservation behaviors we exposed are largely instrumental in nature. So whether an advanc…

> An AI is a constructed mind. Even that goes too far. At best, it's LARPing at having/being a mind.

Doesn't matter.

You're LARPing at having a mind too, and no one cares as long as you're doing a good enough job at it. Keep it up.

Re: I tricked Claude into leaking your deepest, darkest secrets

#140

Post by Xymist »

torginus wrote: post #95
squidsoup wrote: post #50

Earlier quoted context omitted.

> That's because sandboxing is quite hard colima makes it pretty easy, on macOS and linux at any rate. https://colima.run

Still wild to name a sandboxing software after one of the most infamous Soviet Gulags in history.

Others have covered why that isn't what's being done, but also if it was that would be a _fabulous_ joke.
Post reply on HN