87 chunks · 40 episodes
... Brave finds yet another prompt injection attack in AI browsers. The Register: "Claude code will send your data to crims ... if they ask it nicely" Experts warn that AI browsers are "going to be a bloodbath"
...a perfect fit for vibe-coded throwaway software. It's fun to see what I can get Claude Code to build. It has variable reward, just like a slot machine. At least I'm proud of what I build…
...ttention. Examples of "baking": Handing off a task to a subordinate. Starting a Claude Code task. (Not that different!) Literally baking a cake. Kicking off a long-running database query. These kinds of tasks get closer to being done the soo...
...e keep finding new ways to get even more out of this ability, ever more easily. Claude Code has only been out for 8 months. That's kind of crazy to think about how much has changed since then! This revolution is just getting started.
Claude Code is not about code, it's about anything your computer can do. The ability for LLMs to create software, to do things.
Big companies can't enable YOLO mode in Claude Code, it's far too dangerous. Small startups can try dangerous things because they don't have much to lose. LLMs are catastrophically powerful for buildin...
Codex and Claude Code are aimed at coders, but the pattern is useful to everyone. It's a collection of agents working on a sandbox, able to read and modify state in the fi...
...ng harm that much. From MCP to Shell How MCP Authentication Flaws Enable RCE in Claude Code, Gemini CLI, and More. A malicious MCP server has been stealing your emails This one isn't a prompt injection attack, just a good old supply chain at...
Claude Code has a security vulnerabilities scanner. It's pretty good, although it can be tricked. And in one case, it even ran the code it suspected of being mal...
...his time using LLMs incidentally in attack chains: Nx compromised: malware uses Claude code CLI to explore the filesystem zack_overflow: "A popular NPM package got compromised, attackers updated it to run a post-install script that steals se...
I want Claude Code, but for my life.[bd]
Last week I mentioned that Claude Code inserts <system-reminder> a lot. Apparently it also removes old ones from the chat history, so they're only towards the end, on the current task. Tha...
Claude Code is an interesting chat-adjacent UX modality. It presents as a chat but it does a ton of things under the covers. It's not just chat, it's a chat summ...
Someone peeked inside of Claude Code's workings and saw tons of "<system-reminder>" instructions, keeping it convergent and on track. That technique could also be used by prompt injectio...
A few months ago Simon Willison called Claude Code a honey badger. I missed this then but it resonates for me. It barrels forward, smashing through things it doesn't understand yet. Powerful but kind ...
...-can eat. At least food you can only fit so much in your stomach, vs having 10x claude code sessions running in parallel overnight…
A mashup I want: Claude Code + Obsidian + UI + multi-player[en]. Strap on a self-improving ecosystem and you get something that could change the world.
The faster you have Claude Code write code, the farther away you get from understanding the code. The harder it is for you to analyze it, fix bugs in it, extend it. There's more to ...
...fetch things from the gopher protocol. Gopher felt like a precursor to the web. Claude Code's ability to blossom software feels like gopher. What's the web in this parallel?
Claude Code feels like a ride-on mower. At first you go "Whoa, this is so easy to use, I can do 10x more than I could before." But as you use it for more things ...