Live data from Hacker News

Regression: malware reminder on every read still causes subagent refusals

github.com

101–110 of 165 posts

Re: Regression: malware reminder on every read still causes subagent refusals

#101
post #46

Earlier quoted context omitted.

I switched over to codex with pi last week. Even though I strongly dislike OpenAI and I hope this is a temporary solution, they're the only one of the frontier models that let me use my own harness and after recent CC shenanigans I'm done with proprietary harnesses. The immediate thing I've noticed: I get way more out of the codex $100 plan than I was getting out of the Anthropic $200. Like, probably 2x at least. The…

What's your Pi setup?

Probably not that different to everyone else's plan -> tdd -> review loops.

Re: Regression: malware reminder on every read still causes subagent refusals

#102

Earlier quoted context omitted.

Claude Code is a vibe-coded product that doesn't seem to be undergoing regression tests. It looks like they're running it in the loops then ship whatever looks the coolest. How is this not "high on own supply"?

Why the insults/hostility? Why call them script-kiddies? Why the inflated egos? How do you know what testing procedures they use? Do you honestly think they're running some kind of Ralph loop without any testing and just ship whatever looks the coolest? Really ?

> How do you know what testing procedures they use?

We don’t, but we can see the end result, so we know whatever they do isn’t adequate and it suggests they value shipping fast over quality or even listening to customer feedback.

> Do you honestly think they're running some kind of Ralph loop without any testing and just ship whatever looks the coolest? Really ?

No, but given how sharply the quality has been dropping over the past few months and how it suspiciously coincided with the time they admitted that Claude code is now 100% vibe coded, it certainly doesn’t feel too far off.

I’ve personally found the code that the AI writes, even this week (ie not some old models from months ago) to be shockingly shoddy. I’ve rewritten some AI code (created via spec driven development and a workflow that includes planning and refactoring) by hand and I’ve been very conscious of the amount of micro-design-changes I as a human make where the AI just blows forward shoehorning a solution into the design. My implementation happens b has adjusted and shifted many times to insure clear and performant logic, while the AI commits to an approach early and applied whatever brute force is necessary to make it work. I’ve also asked it to write various tests for me or to make isolated changes and quite frankly the code was just not very good. Working, but convoluted. Even with guidance and iteration, it’s still not on a human level.

So it’s not hard to see that if you have an application as large and complex as Claude code and you let the AI do it all, that it’s going to be a mess.

I’m not against using AI for development, but you have to be realistic about its capabilities. I feel like this is where they “got high on their own supply” and are blinded to the AI’s shortcomings and failures.

Re: Regression: malware reminder on every read still causes subagent refusals

#103
We're enrolled in the Cyber Verification Program and Claude will happily help me look for vulnerabilities and built POCs demonstrating RCE. But when I point it to a malware sample and ask for analysis it will still refuse any work. It's incredibly frustrating.

Re: Regression: malware reminder on every read still causes subagent refusals

#104
post #4

I am still baffled by the fact that we have collectively agreed to use agentic harnesses by the same companies that are selling access to their APIs. I mean, I am sure they don't mean it but they have the incentive to burn as much tokens as they are allowed to get away with. Also for better or worse I imagine the Anthropic engineers use Claude Code on some sort of Unlimited plan that practically makes no sense for re…

It makes perfect sense to me for an AI system to be vertically owned that way you can do vertical optimization.

Re: Regression: malware reminder on every read still causes subagent refusals

#105

Earlier quoted context omitted.

You honestly think “Anthropic employees are script kiddies with inflated egos that are high on their own supply” is a reasonable stance? This seems such an immature take to me, and hard to take serious. Anthropic just a bunch of script kiddies? Really?

They’ve said themselves that Claude code is 100% vibe coded now. That certainly meets the criteria of “script kiddies” and “high on their own supply”. The negative connotations are there on purpose because of the bugs and issues that these products have, something which presumably they wouldn’t have if there was human oversight and acknowledgement that the AI isn’t infallible.

> They’ve said themselves that Claude code is 100% vibe coded now. That certainly meets the criteria of “script kiddies”

That's not what script kiddies are at all.

> The negative connotations are there on purpose because of the bugs and issues that these products have, something which presumably they wouldn’t have if there was human oversight and acknowledgement that the AI isn’t infallible.

That's a big assumption, given that Anthropic is also currently growing by more than 3x per quarter. Maybe the problem is more complicated and we don't know everything, and they're also just simply suffering from growth pains?

Re: Regression: malware reminder on every read still causes subagent refusals

#106
post #66

curl -sS https://api.anthropic.com/v1/messages \ -H "authorization: Bearer $(security find-generic-password -s 'Claude Code-credentials' -w | jq -r .claudeAiOauth.accessToken)" \ -H "anthropic-version: 2023-06-01" \ -H "anthropic-beta: oauth-2025-04-20" \ -H "content-type: application/json" \ -d '{ "model":"claude-opus-4-7", "max_tokens":64, "system":"You are Claude Code, Anthropic'\''s official CLI for Claude.", "me…

You know, you can write in English if you want on this english-language forum. I assume you're saying "You can just generate your own harness to not be subject to these claude code issues". Unfortunately, Anthropic has already made it clear that using claude code is the only way to be sure you won't get charged API pricing instead of max plan pricing, so the tokens are way more expensive.

What you said doesn't make sense, what do you mean by "using claude code is the only way to be sure you won't get charged API pricing" ?? they can block your account or make the api more sensible for their harness to detect but the risk of being charged API is 0% when you are on a plan.

Re: Regression: malware reminder on every read still causes subagent refusals

#107
post #67

Earlier quoted context omitted.

Appreciate the advice but this is Claude Managed Agents, so one can’t simply write one’s own harness.

Managed agents aren't particularly harder to replicate yourself either. Give me a team of 3 good engineers, 4 months, and about $600k and I'll have a clone that operates on a warm pool of ec2 instances, or warm pool of k8s pods, or any other platform you might like. Or 1 good engineer, 1 month, and $200k of anthropic credits.

you just need a max plan and a week at most

Re: Regression: malware reminder on every read still causes subagent refusals

#108

Just putting it out there that OpenCode lets you edit your system prompt, and choose a model that isn't bonkers expensive. { "agent": { "subagent-coder-mini": { "description": "Assign this subagent for small, well-defined tasks performed quickly", "mode": "primary", "prompt": "{file:./prompts/my-custom-prompt.md}", "model": "deepseek-v4-flash" } } } (I actually think OpenCode UX sucks, but there isn't much else out t…

will using claude via opencode get me banned this week or is that not until next week?

You will not get banned if you use the API. AFAIK you can't use the subscription with other harnesses. That is how I understood it.

Re: Regression: malware reminder on every read still causes subagent refusals

#109

Earlier quoted context omitted.

>That doesn't seem like a good counterargument to me. It does to me especially since he did not implement a sensible detection or reporting pipeline ahead of launching a CSAM generation tool.

Failing to do X doesn't make Y a good idea. You haven't engaged with the argument I made favoring to instead repeat a politically charged misrepresentation.

I think it's an ok counter argument. You can't have "AI should do the users bidding" and "implement a sensible detection and reporting pipeline."

I mean that is what anthropic tried here.

Re: Regression: malware reminder on every read still causes subagent refusals

#110
post #66

Earlier quoted context omitted.

You know, you can write in English if you want on this english-language forum. I assume you're saying "You can just generate your own harness to not be subject to these claude code issues". Unfortunately, Anthropic has already made it clear that using claude code is the only way to be sure you won't get charged API pricing instead of max plan pricing, so the tokens are way more expensive.

What you said doesn't make sense, what do you mean by "using claude code is the only way to be sure you won't get charged API pricing" ?? they can block your account or make the api more sensible for their harness to detect but the risk of being charged API is 0% when you are on a plan.

He is saying the same as you :)
Post reply on HN