Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Claude Code's source code has been leaked via a map file in their NPM registry

twitter.com

Post reply on HN
Print view View original

701–710 of 1001 posts

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#701

Post by lrvick »

stackghost wrote: post #633
lynx97 wrote: post #630

Earlier quoted context omitted.

Great! Lets do the CAPTCHA-test: Will I, as a 100% blind user, be able to complete your process?

I think so? Can you use a smartphone? edit: can't reply, the rate-limiting is such an awful UX

Not parent poster but I am a maintainer of software powering significant portions of the internet and prove my humanity with a 16 year old PGP key with thousands of transitive trust signatures formed through mostly in-person meetings, using IETF standards and keychain smartcards, as is the case for everyone I work with.

But, I do not have an Android or iOS device as I do not use proprietary software, so a smartphone based solution would not work for me.

Why re-invent the wheel? Invest in making PGP easier and keep the decades of trust building going anchoring humans to a web of trust that long predates human-impersonation-capable AI.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#702

Post by solidasparagus »

harlequinetcie wrote: post #415

Whenever someone figures out why it's consuming so many tokens lately, that's the post worth upvoting.

What do you mean? Costs spiked with the introduction of the 1M context window I believe due to larger average cached input tokens, which dominate cost.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#703

Post by IceWreck »

Painsawman123 wrote: post #156

Really surprising how many people are downplaying this leak! "Google and OpenAi have already open sourced their Agents, so this leak isn't that relevant " What Google and OpenAi have open sourced is their Agents SDK, a toolkit, not the secret sauce of how their flagship agents are wired under the hood! expect the takedown hammer on the tweet, the R2 link, and any public repos soon

> What Google and OpenAi have open sourced is their Agents SDK, a toolkit, not the secret sauce of how their flagship agents are wired under the hood

And how is that any different? Claude Code is a harness, similar to open source ones like Codex, Gemini CLI, OpenCode etc. Their prompts were already public because you could connect it to your own LLM gateway and see everything. The code was transpiled javascript which is trivial to read with LLMs anyways.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#704

Post by sebastiennight »

SV_BubbleTime wrote: post #663
0x3f wrote: post #134

Earlier quoted context omitted.

You'll never win this battle, so why waste feelings and energy on it? That's where the internet is headed. There's no magical human verification technology coming to save us.

IDK. I sort of like the idea that now instead of dead internet theory being a joke, that it’ll be a well known fact that a minority of people are not real and there is no point in engaging… I look forward to Social 3… where people have to meet face to face.

"minority"?

This is https://en.wikipedia.org/wiki/Sybil_attack

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#705

Post by ZeWaka »

blobbers wrote: post #683

It's a little bit shocking that this zipfile is still available hours later. Could anyone in legal chime in on the legality of now 're-implementing' this type of system inside other products? Or even just having an AI look at the architecture and implement something else? It would seem given the source code that AI could clone something like this incredibly fast, and not waste it's time using ts as well. Any Legal GC…

https://en.wikipedia.org/wiki/Clean-room_design#Case_law

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#706

Post by thih9 »

0x3f wrote: post #134
BoppreH wrote: post #113

Undercover mode also pretends to be human, which I'm less ok with: https://github.com/chatgptprojects/claude-code/blob/642c7f94...

You'll never win this battle, so why waste feelings and energy on it? That's where the internet is headed. There's no magical human verification technology coming to save us.

Human verification technology absolutely exists. Give it some time and people who sell ai today are going to shoehorn it everywhere as the solution to the problem they are busy creating now.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#707

Post by taurath »

0x3f wrote: post #134
BoppreH wrote: post #113

Undercover mode also pretends to be human, which I'm less ok with: https://github.com/chatgptprojects/claude-code/blob/642c7f94...

You'll never win this battle, so why waste feelings and energy on it? That's where the internet is headed. There's no magical human verification technology coming to save us.

It’s where THIS internet is headed. The future may involve a lot more of them I think.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#708

Post by srmatto »

lrvick wrote: post #684
0x3f wrote: post #134

Earlier quoted context omitted.

You'll never win this battle, so why waste feelings and energy on it? That's where the internet is headed. There's no magical human verification technology coming to save us.

I can prove all contributions to stagex are by humans because we all belong to a 25 year old web of trust with 5444 endorser keys including most redhat, debian, ubuntu, and fedora maintainers, with all of our own maintainer keys in smartcards we tap to sign every review and commit, and we do background checks on every new maintainer. I am completely serious. We have always had a working proof of human system called W…

Can't you just instruct Claude Code to use your signing keys? I understand you may say "I won't." But my point is that someone can.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#709

Post by mikkupikku »

j2kun wrote: post #567
0x3f wrote: post #134

Earlier quoted context omitted.

You'll never win this battle, so why waste feelings and energy on it? That's where the internet is headed. There's no magical human verification technology coming to save us.

Fatalism will also not fix anything. But I suppose death comes for us all, yes? Why do anything at all?

> But I suppose death comes for us all, yes? Why do anything at all?

Wrong take. Death comes for us all, yes, so why hold back? Do you want to live forever?

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#710

Post by sebastiennight »

lrvick wrote: post #693
stackghost wrote: post #606

Earlier quoted context omitted.

I am actively building non-magical human verification technology that doesn't require you uploading your retinal scans or ID to billionaires or incompetent outsourcing firms.

We already have it and we use it to validate the trusted human maintainer involvement behind the linux packages that power the entire internet: PGP Web Of Trust. Still works as designed and I still go to keysigning parties in person.

Say a regular human wanted to join and prove their humanhood status (expanding the web of trust). How would they go about that? What is the theoretical ceiling on the rate of expansion of this implementation?
Post reply on HN