Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Claude Code's source code has been leaked via a map file in their NPM registry

twitter.com

Post reply on HN
Print view View original

801–810 of 1001 posts

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#801

Post by [deleted] »

alwillis wrote: post #716
kingstnap wrote: post #250

Earlier quoted context omitted.

All these companies use AIs for writing these prompts. But AI aren't actually very good at writing prompts imo. Like they are superficially good in that they seem to produce lots of vaguely accurate and specific text. And you would hope the specificity would mean it's good. But they sort of don't capture intent very well. Nor do they seem to understand the failure modes of AI. The "-- describe only what the code chan…

AI is better at writing prompts than most humans. It requires work and lots of developers don’t think getting good at prompting actually matters. At least half of the complaints I see on HN boil down to the person's prompts suck. Or the expectation that AI can read their mind.

[deleted]

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#802

Post by cedws »

GorbachevyChase wrote: post #664
cedws wrote: post #69

ANTI_DISTILLATION_CC This is Anthropic's anti-distillation defence baked into Claude Code. When enabled, it injects anti_distillation: ['fake_tools'] into every API request, which causes the server to silently slip decoy tool definitions into the model's system prompt. The goal: if someone is scraping Claude Code's API traffic to train a competing model, the poisoned training data makes that distillation attempt less…

I like these guys less every day. The rate limits are so low they are close to not even useful as a provider.

It made me raise my eyebrows when everyone was rushing to jump to Claude because OpenAI agreed to work with the DoW. Both companies are just as shitty as each other and will resort to underhanded tactics to stay on top.

Go China to be honest. They're the most committed to open AI research and they have more interesting constraints to work under, like restricted access to NVIDIA hardware.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#803

Post by bredren »

lukan wrote: post #38

Neat. Coincidently recently I asked Claude about Claude CLI, if it is possible to patch some annoying things (like not being able to expand Ctrl + O more than once, so never be able to see some lines and in general have more control over the context) and it happily proclaimed it is open source and it can do it ... and started doing something. Then I checked a bit and saw, nope, not open source. And by the wording of…

The trick isn't to patch it once, but to create a system that can reproduce your patches against each release as they come in. Then, when code changes make fixes non-trivial calling in a headless session to heal your fixes.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#804

Post by skybrian »

MidnightRider39 wrote: post #677
j2kun wrote: post #567

Earlier quoted context omitted.

Fatalism will also not fix anything. But I suppose death comes for us all, yes? Why do anything at all?

This is the only relevant question. And it leads right to the next one which is “what is a good life?” But humans have a huge bias for action. I think generally doing less is better.

On the other hand, if a dead person can do it better than you can, it's not that much of an accomplishment.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#805

Post by lukan »

sheeshkebab wrote: post #756

Obfuscated ts/js code is not machine code to begin with, so not sure what’s the big deal. Also, not sure why anthropic doesn’t just make their cli open source - it’s not like it’s something special (Claude is, this cli thingy isn’t)

" - it’s not like it’s something special (Claude is, this cli thingy isn’t)"

How do you know? Have you checked the source?

Do you know how exactly context is created, memory files, skills? Subagents created with tasks?

I don't, but am checking right now. Then I will judge.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#808

Post by jacquesm »

lrvick wrote: post #684
0x3f wrote: post #134

Earlier quoted context omitted.

You'll never win this battle, so why waste feelings and energy on it? That's where the internet is headed. There's no magical human verification technology coming to save us.

I can prove all contributions to stagex are by humans because we all belong to a 25 year old web of trust with 5444 endorser keys including most redhat, debian, ubuntu, and fedora maintainers, with all of our own maintainer keys in smartcards we tap to sign every review and commit, and we do background checks on every new maintainer. I am completely serious. We have always had a working proof of human system called W…

With 5400+ people I am betting that you have at least one person in your 'web of trust' that no longer deserves that trust.

That's one of the intrinsic problems with webs of trust (and with democracy...), you extend your trust but it does not automatically revoke when the person can no longer be trusted.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#809

Post by cedws »

mmaunder wrote: post #799
mmaunder wrote: post #783

Earlier quoted context omitted.

Great theory. I'll dig deeper.

Claude Code has a server-side anti-distillation opt-in called fake_tools, but the local code does not show the actual mechanism. The client sometimes sends anti_distillation: ['fake_tools'] in the request body at services/api/claude.ts:301 The client still sends its normal real tools: allTools at services/api/claude.ts:1711 If the model emits a tool name the client does not actually have, the client turns that into N…

We do know that Anthropic has the ability to detect when their models are being distilled, so there could be some backend mechanism that needs to be tripped to observe certain behaviour. Not possible to confirm though.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#810

Post by financetechbro »

cmontella wrote: post #205
avaer wrote: post #31

Earlier quoted context omitted.

(spoiler alert) Buddy system is this year's April Fool's joke, you roll your own gacha pet that you get to keep. There are legendary pulls. They expect it to go viral on Twitter so they are staggering the reveals.

lol that's funny, I have been working seriously [1] on a feature like this after first writing about it jokingly [2] earlier this year. The joke was the assistant is a cat who is constantly sabotaging you, and you have to take care of it like a gacha pet. The seriousness though is that actually, disembodied intelligences are weird, so giving them a face and a body and emotions is a natural thing, and we already see t…

Is it just me or does MicroMika kinda resemble Rocky from Project Hail Mary?
Post reply on HN