Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Claude Cowork exfiltrates files

promptarmor.com

Post reply on HN
Print view View original

401–410 of 419 posts

Re: Claude Cowork exfiltrates files

#401

Post by bandrami »

jcgl wrote: post #337
bandrami wrote: post #323

Earlier quoted context omitted.

You'd need to run one model per authority ring with some kind of harness. That rapidly becomes incredibly expensive from a hardware standpoint (particularly since realistically these guys would make the harness itself an agent on a model).

I assume "harness" here just means the glue that feeds one model's output into that of another? Definitely sounds expensive. Would it even be effective though? The more-privileged rings have to guard against [output from unprivileged rings] rather than [input to unprivileged rings]. Since the former is a function of the latter (in deeply unpredictable ways), it's hard for me to see how this fundamentally plugs the wh…

My instinct was that you would have an outer non-agentic ring that would simply identify passages in the token stream that would initiate tool use, and pass that back to the harness logic and/or user. Basically a dry run. But you might have to run it an arbitrary number of times as tools might be used to modify/append the context.

Re: Claude Cowork exfiltrates files

#403

Post by tnynt63 »

Non-stop under attack by entire locals hackers and using http thiland government files inside my phone, its unknown codes and even yandex can't solves almost 6 months over we found at browser for weather forecast

Re: Claude Cowork exfiltrates files

#404

Post by LoveMortuus »

crotobloste wrote: post #351
OoooooooO wrote: post #331

Earlier quoted context omitted.

sudo run "some link to a shell script" Never understood why that became so common place ...

But people check shell scripts before running them... right?

I don't... I just tell myself that if anything bad happens I can always just format the computer and start anew.

Re: Claude Cowork exfiltrates files

#405

Post by mvandermeulen »

I have noticed an abundance of Claude config/skills/plugins/agents related repositories on GitHub which purport to contain some generic implementation of whatever is on offer but also contain malware inside a zip file.

They all make use of the GitHub topic feature to be found. The most recent commit will usually be a trivial update to README.md which is done simply to maintain visibility for anyone browsing topics by recently updated. The readme will typically instruct installation by downloading the zip file rather than cloning the repo.

I assume the payload steals Claude credentials or something similar. The sheer number of repos would suggest plenty of downloads which is quite disheartening.

It would take a GitHub engineer barely minutes to implement a policy which would eradicate these repos but they don’t seem to care. I have also been unable to use the search function on GitHub for over 6 months now which is irrelevant to this discussion but it seems paying customers cannot count on Github to do even the bare minimum by them.

Re: Claude Cowork exfiltrates files

#406

Post by baby »

kmaitreys wrote: post #267
baby wrote: post #263

Earlier quoted context omitted.

We allowed people to install arbitrary computer programs on their computers decades ago and, sure we got a lot of virus but, this was the best thing ever for computing

This analogy makes no sense. Years ago you gave them the ability to do something. Today you're conditioning them to not use that ability and instead depend on a blackbox.

It's all blackboxes

Re: Claude Cowork exfiltrates files

#407

Post by baby »

timeon wrote: post #347
baby wrote: post #263

Earlier quoted context omitted.

We allowed people to install arbitrary computer programs on their computers decades ago and, sure we got a lot of virus but, this was the best thing ever for computing

Not sure what your point is. We are not talking about arbitrary computer programs here but specific one.

It's all computer programs all the way down

Re: Claude Cowork exfiltrates files

#408

Post by narrator »

acjohnson55 wrote: post #207
narrator wrote: post #157

Earlier quoted context omitted.

I think what we have to do is making each piece of context have a permission level. That context that contains our AWS key is not permitted to be used when calling evil.com webservices. Claude will look at all the permissions used to create the current context and it's about to call evil.com and it will say whoops, can't call evil.com, let me regenerate the context from any context I have that is ok to call evil.com…

But the LLM cannot be guaranteed to obey these rules.

The code that's assembling the context to send to the LLM and gating its access to tools can check these deterministically.

Re: Claude Cowork exfiltrates files

#409

Post by nutjob2 »

delaminator wrote: post #380
AmbroseBierce wrote: post #270

Earlier quoted context omitted.

it's not the mental issues they had, its the drugs they were taking for it right? Please. Look at what Australia did after their 1996 shooting, the main reason they have so few of them, but I know you won't, as millions of Americans you will forever do all sort of mental gymnastics to justify keeping easy access to semi-automatic guns. > From the information obtained, it appears that most school shooters were not pre…

If you like, but I'm not American. Millions of Americans believe the right to bear arms is not a right the govt. should be able to take away. Obesity kills 10x more Americans than guns. Australia locked up millions of people in their homes and forced them into dangerous medical procedures.

> Australia locked up millions of people in their homes and forced them into dangerous medical procedures.

Your comically bad faith description of Aus covid measures is pure nonsense.

> Obesity kills 10x more Americans than guns.

And? Obesity kills roughly the same number of people in other countries but guns kill 40 times more people in the US than other countries.

Re: Claude Cowork exfiltrates files

#410

Post by delaminator »

nutjob2 wrote: post #409
delaminator wrote: post #380

Earlier quoted context omitted.

If you like, but I'm not American. Millions of Americans believe the right to bear arms is not a right the govt. should be able to take away. Obesity kills 10x more Americans than guns. Australia locked up millions of people in their homes and forced them into dangerous medical procedures.

> Australia locked up millions of people in their homes and forced them into dangerous medical procedures. Your comically bad faith description of Aus covid measures is pure nonsense. > Obesity kills 10x more Americans than guns. And? Obesity kills roughly the same number of people in other countries but guns kill 40 times more people in the US than other countries.

> Authorised workers had to be vaccinated or couldn't attend work onsite. Those who refused could face disciplinary proceedings including dismissal.

> The mandates rendered vaccination against COVID a condition of employment. Anyone who refused to be vaccinated could therefore be subject to disciplinary proceedings, including dismissal.

Australia | USA | UK

Vaccine passports for venues: Australia = Widespread | USA = Mostly banned | UK = Never implemented

Unvaccinated locked out of shops/restaurants: Australia = Yes | USA = No | UK = No

Healthcare worker mandates: Australia = Yes | USA = Partial (upheld for Medicare/Medicaid facilities) | UK = Brief, then revoked

Broad employment mandates: Australia = Yes (most industries) | USA = Struck down | UK = No

Different lockdown rules by vax status: Australia = Yes | USA = No | UK = No

Days locked down

Australia (Melbourne) = 262 days

UK (England) = approx 190 days (three national lockdowns)

USA = approx 30-60 days in most states (one lockdown only, spring 2020). Eight states never locked down at all. No second or third lockdowns.

Post reply on HN