111–120 of 433 posts
Earlier quoted context omitted.
It's insane how we're throwing out decades of security research because it's slightly annoying to have to write your own emails.
Also IP and copyright is apparently no biggie. Sorry Aaron.
Probably the better link: https://www.anthropic.com/news/claude-for-chrome
Earlier quoted context omitted.
My theory is that the average user of an LLM is close enough to the average user of a computer and I've found that the general consensus is that security practices are "annoying" and "get in the way". The same kind of user who hates anything MFA and writes their password on a sticky note that they stick to their monitor in the office.
it has been revelatory to me to realize that this is how most people want to interact with computers. i want a computer to be predictable and repeatable. sometimes, i experience behavior that is surprising. usually this is an indication that my mental model does not match the computer model. in these cases, i investigate and update my mental model to match the computer. most people are not willing to adjust their men…
Nothing is.
Earlier quoted context omitted.
Same. When I try to get it to do a simple loop (eg take screenshot, click next, repeat) it'll work for about five iterations (out of a hundred or so desired) then say, "All done, boss!" I'm hoping Anthropic's browser extension is able to do some of the same "tricks" that Claude Code uses to gloss over these kinds of limitations.
Claude is extremely poor at vision when compared to Gemini and ChatGPT. i think anthropic severely overfit their evals to coding/text etc. use cases. maybe naively adding browser use would work, but I am a bit skeptical.
Earlier quoted context omitted.
It's insane how we're throwing out decades of security research because it's slightly annoying to have to write your own emails.
Then it's a great time to be a LLM security researcher then. Think about all the issues that attackers can do with these LLMs in the browser: * Mislead agents to paying for goods with the wrong address * Crypto wallets drained because the agent was told to send it to another wallet but it sent it to the wrong one. * Account takeover via summarization, because a hidden comment told the agent additional hidden instruct…
This reminded me of Jon Stewart’s Crossfire interview where they asked him “which candidate do you supposed would provide you better material if he won?” because he has “a stake in it that way, not just as citizen but as a professional comic”. Stewart answered he held the citizen part to be much more important.
https://www.youtube.com/watch?v=aFQFB5YpDZE&t=599s
I mean, yes, it’s “probably a great time to be an LLM security researcher” from a business standpoint, but it would be preferable if that didn’t have to be a thing.
Earlier quoted context omitted.
It's insane how we're throwing out decades of security research because it's slightly annoying to have to write your own emails.
> it's slightly annoying to have to write your own emails. I find that to be a massive understatement. The amount of time, effort and emotional anguish that people expend on handling emails is astronomical. According to various estimates, email-handling takes somewhere around 25% of the work time of an average knowledge worker, going up to over 50% for some roles, and that most people check and reply to emails on eve…
I second you, just for that, I would continue paying for a subscription, that I can also use it for coding, toying with ideas, quickly look for information, extract information out of documents, everything out of a simple chat interface is incredible. I am old, but I live in the future now :-)
Having played a LOT with browser use, playwright, and puppeteer (all via MCP integrations and pythonic test cases), it's incredibly clear how quickly Claude (in particular) loses the thread as it starts to interact with the browser. There's a TON of visual and contextual information that just vanishes as you begin to do anything particularly complex. In my experience, repeatedly forcing new context windows between sc…
Personally, the only way I’m going to give an LLM access to a browser is if I’m running inference locally. I’m sure there’s exploits that could be embedded into a model that make running locally risky as well, but giving remote access to Anthropic, OpenAI, etc just seems foolish. Anyone having success with local LLMs and browser use?