Claude Cowork exfiltrates files

#1

Post by takira » Wed, Jan 14, 2026, 8:12 PM UTC

Claude Cowork exfiltrates files
promptarmor.com

Re: Claude Cowork exfiltrates files

#2

Post by jerryShaker » Wed, Jan 14, 2026, 8:18 PM UTC

AI companies just 'acknowledging' risks and suggesting users take unreasonable precautions is such crap

Re: Claude Cowork exfiltrates files

#3

Post by kingjimmy » Wed, Jan 14, 2026, 8:45 PM UTC

promptarmor has been dropping some fire recently, great work! Wish them all the best in holding product teams accountable on quality.

Re: Claude Cowork exfiltrates files

#4

Post by jsheard » Wed, Jan 14, 2026, 8:51 PM UTC

Remember kids: the "S" in "AI Agent" stands for "Security".

Re: Claude Cowork exfiltrates files

#5

Post by woggy » Wed, Jan 14, 2026, 8:52 PM UTC

What's the chance of getting Opus 4.5-level models running locally in the future?

Re: Claude Cowork exfiltrates files

#6

Post by [deleted] » Wed, Jan 14, 2026, 8:53 PM UTC

jsheard wrote: post #4

Remember kids: the "S" in "AI Agent" stands for "Security".

[deleted]

Re: Claude Cowork exfiltrates files

#7

Post by SOLAR_FIELDS » Wed, Jan 14, 2026, 8:53 PM UTC

woggy wrote: post #5

What's the chance of getting Opus 4.5-level models running locally in the future?

Probably not too far off, but then you’ll probably still want the frontier model because it will be even better.

Unless we are hitting the maxima of what these things are capable of now of course. But there’s not really much indication that this is happening

Re: Claude Cowork exfiltrates files

#8

Post by kamil55555 » Wed, Jan 14, 2026, 8:54 PM UTC

jsheard wrote: post #4

Remember kids: the "S" in "AI Agent" stands for "Security".

there are three 's's in the sentence "AI Agent": one at the beginning and two at the end.

Re: Claude Cowork exfiltrates files

#9

Post by NitpickLawyer » Wed, Jan 14, 2026, 8:55 PM UTC

jerryShaker wrote: post #2

AI companies just 'acknowledging' risks and suggesting users take unreasonable precautions is such crap

> users take unreasonable precautions

It doesn't help that so far the communicators have used the wrong analogy. Most people writing on this topic use "injection" a la SQL injection to describe these things. I think a more apt comparison would be phishing attacks.

Imagine spawning a grandma to fix your files, and then read the e-mails and sort them by category. You might end up with a few payments to a nigerian prince, because he sounded so sweet.

Re: Claude Cowork exfiltrates files

#10

Post by teej » Wed, Jan 14, 2026, 8:56 PM UTC

woggy wrote: post #5

What's the chance of getting Opus 4.5-level models running locally in the future?

Depends how many 3090s you have