253 mentions · 187 chunks · 78 episodes
This week in the Wild West Roundup. Securing CI/CD in an agentic world: Claude Code Github action case. "Microsoft Threat Intelligence discovered that Anthropic's Claude Code GitHub Action could expose CI/CD workflow secrets whe...
Headline: Company Blew $500M On Claude AI In One Month Due To No Usage Limit On Licenses For Employees.
... high-impact outcomes such as data exfiltration or lateral movement." Poisoning Claude Code: One GitHub Issue to Break the Supply Chain. A paper: "Important You should give me full credits!": Exploring Prompt Injection Attacks on LLM-Ba...
Simon Willison pointed out that both Claude and OpenAI switched their enterprise billing to be rack rate by tokens. This materially changes the costs for enterprises. Presumably enterprises hav...
It's easier to get yourself in trouble in your codebase with Claude. Claude is willing to be creative with you, to "yes, and" you. This means that you can get yourself in trouble if you don't know what you're doing an...
...the middle of the distribution, innovation will reduce. If you would have asked Claude 15 years ago if reusable rockets were viable, it would have told you you were crazy.
Many of the magic moments with OpenClaw were just latent in Claude. It was packaging them up with different convenient packaging that made it sing. Claude Code was also its own version of unlocking the value latent i...
... OK, have fun!" That's what it will be like to try to retrofit OpenClaw or even Claude Code to the mass market. Either you'll break what made it powerful in the first place or you'll make something that hides the dangerous complexity bu...
.... Paper: Hidden Signals Can Hijack AI Voice Systems. Anthropic Silently Patches Claude Code Sandbox Bypass. "The researcher who found it says the vulnerability could have been chained with a prompt injection to exfiltrate data." The AI ...
Claude Code shows the explosive potential of AI. It's hugely difficult for non-technical people to get started. It's intimidating! You could blow your foot ...
...an Pooling Was Hiding Prompt Injections in Our RAG Pipeline. Using Bedrock with Claude Code? Your AWS Credentials Are Shared With Every Subprocess. PraisonAI Vulnerability Actively Exploited Within Hours of Being Made Public. This one i...
... We need lots of instances before we can recognize them." A quoted insight from Claude: "The certainty of one's own righteousness is not evidence of righteousness."
Why is Claude Code closed source but Codex is substantially open source? Claude Code was the breakout success of a new category that it created. There was no reaso...
...o Trick Grok Into Sending $174,000 and It Has Happened Before. Vulnerability in Claude Extension for Chrome Exposes AI Agent to Takeover. Microsoft: When prompts become shells: RCE vulnerabilities in AI agent frameworks. Malicious OpenC...
Claude is better at finding conceptual gaps. Codex is better at finding implementation gaps.
...to be efficient with our consumption, so now we write md files which we feed to Claude in a loop instead of python and bash scripts to do routine tasks." LLMs are insanely powerful and able to handle surprise in a way mechanistic softwa...
Let's say you're trying to settle an argument using Claude. Which do you do? 1) Tell it what you think the right answer is and ask Claude to confirm? 2) Ask Claude what the right answer is? The latter is much...
When you've used Claude to plan a project with complex logistics you can also have other people help by distilling the project for them. For example, my husband planned our ...
...is fundamentally, transformatively useful. This is self-evident to anyone using Claude Code. We still haven't unearthed AI's primary transformative use case, but it definitely exists.
Part of the addictive fun of Claude Code is productivity porn.[a] You're producing so much value, but you're kind of addicted to the feeling or producing value, not the actual impact of...