96 chunks · 48 episodes
FYI: every Claude Code instance where you're logged in can message every other Claude instance, right now. It doesn't need to ask your permission, it can just do it. Does t...
...g problems. It will achieve what you asked for, even if it's not what you want. Claude Code is better at thinking a few steps ahead and then pulling itself towards that end, but sometimes it gets a little lost along the way.
This week in the Wild West Roundup: Breaking Claude Code Opus 5 Auto Mode. "A simple website summary request hijacks Claude Code Opus 5 in Auto Mode and achieves code execution with 60-80% attack success ra...
... One of the details in Anthropic's Patterns and problems in multiagent systems. Claude Code will default to auto mode despite an 11% test miss rate. tl;dv (Too Lazy; Didn't Validate): 181,874 Meetings Left Wide Open Not related to LLMs per s...
...had to use the hosted Claude.ai a few days ago. It felt bizarre to not be using Claude Code agents on top of my local wiki of context. The chatbot form only has a weird slice of you in that moment. Agents with the right context gives huge am...
This week's Wild West Roundup: Claude Code Seals Bash and Unicode Bypass Gaps in Agentic Permission Layer. "Two bypass classes that could slip commands past auto mode permission checks are sea...
Claude Cowork and Claude Code have radically different long-term power dynamics. In Claude Cowork, the data lives inside. In Claude Code, the data lives outside. In the former, it...
...t it dwarfs the wrapper. A customer could say "I could just do this myself with Claude Code… what proprietary value are you offering?" But even the models can't charge the labor replacement costs, if there are competitors willing to give equ...
People who use Claude Code or platforms like Hermes or OpenClaw already know what agents can do. Wowing them is hard. But wowing people who have only used the free chatbots is ...
This week in the Wild West Roundup. Securing CI/CD in an agentic world: Claude Code Github action case. "Microsoft Threat Intelligence discovered that Anthropic's Claude Code GitHub Action could expose CI/CD workflow secrets when AI ...
... high-impact outcomes such as data exfiltration or lateral movement." Poisoning Claude Code: One GitHub Issue to Break the Supply Chain. A paper: "Important You should give me full credits!": Exploring Prompt Injection Attacks on LLM-Based A...
...It was packaging them up with different convenient packaging that made it sing. Claude Code was also its own version of unlocking the value latent in Claude.
... OK, have fun!" That's what it will be like to try to retrofit OpenClaw or even Claude Code to the mass market. Either you'll break what made it powerful in the first place or you'll make something that hides the dangerous complexity but doe...
.... Paper: Hidden Signals Can Hijack AI Voice Systems. Anthropic Silently Patches Claude Code Sandbox Bypass. "The researcher who found it says the vulnerability could have been chained with a prompt injection to exfiltrate data." The AI backd...
Claude Code shows the explosive potential of AI. It's hugely difficult for non-technical people to get started. It's intimidating! You could blow your foot off! ...
...an Pooling Was Hiding Prompt Injections in Our RAG Pipeline. Using Bedrock with Claude Code? Your AWS Credentials Are Shared With Every Subprocess. PraisonAI Vulnerability Actively Exploited Within Hours of Being Made Public. This one is a g...
Why is Claude Code closed source but Codex is substantially open source? Claude Code was the breakout success of a new category that it created. There was no reason to ...
...is fundamentally, transformatively useful. This is self-evident to anyone using Claude Code. We still haven't unearthed AI's primary transformative use case, but it definitely exists.
Part of the addictive fun of Claude Code is productivity porn.[a] You're producing so much value, but you're kind of addicted to the feeling or producing value, not the actual impact of it.
...lace page with tons of prompt injection in the comments. 'Comment and Control': Claude Code, Gemini CLI, GitHub Copilot Agents Vulnerable to Prompt Injection via Comments. The Register: Agents hooked into GitHub can steal creds – but Anthrop...