3 ms·
It seems like a cheaper intermediate capability would be to give Claude the ability to SSH to your computer or to a cloud container. That would unlock a lot of
by nilstycho 2y ago
It seems like a cheaper intermediate capability would be to give Claude the ability to SSH to your computer or to a cloud container. That would unlock a lot of possibilities, without incurring the cost of the vision model or the difficulty of cursor manipulation.
Does this already exist? If not, would the benefits be lower than I think, or would the costs be higher than I think?
- reportgunner 2y agoNot just benefits, costs but also the risks are to be considered here I think.
- nilstycho 2y agoWhat are the risks? Isn't this a strict subset of the risks of full desktop access? Claude can just open a GUI terminal with Computer Use. (I think.)
- reportgunner 2y agoSoftware posing as Claude that is actually a malware tricking an unsuspecting non-terminal user into executing it is what I was thinking about.
- ActionHank 2y agoAnecdotal, but I think if you mention it in any discussions in a corporate alarm bells will go off because HACKERS use SSH. This _seems_ more like a normal user so clearly could not do anything nefarious. /s
- deleted 2y ago[deleted]
- kordlessagain 2y agoI’m working on Webwright which presents as a shell. It’s on GitHub.
- nilstycho 2y agoBased on the flow diagram, that doesn't seem to be the same thing. Webwright seems to be a shell as a tool for me, enhanced with AI features. I'm suggesting the shell as a tool for AI. Webwright is a front-end shell that presents to me; I'm suggesting a back-end shell that presents to Claude. It doesn't appear that Webwright enables tool-use. In other words, there's no task-oriented feedback loop between AI-provided shell commands and the results of those shell commands. Please correct me if that's not right.
- pier25 2y agoI would never allow an AI to SSH into a server. Just the other day someone used Claude to write a script to configure a server. It left a port open and the server was hacked hours later and used to attack other servers. Hetzner almost banned the hosting account. https://x.com/rameerez/status/1848707234068382001 https://x.com/rameerez/status/1848707234068382001
- jazzyjackson 2y agoI had GPT4o walk me through configuring my RAID array, simple two drive duplication affair, and some command broke the configuration in new and mysterious ways - I can no longer get the drives to appear at all. So that will be the last time I copy paste anything from an AI into a shell.
- nilstycho 2y agoIIUC, Claude's "Computer Use" is roughly a remote desktop, which is a superset of a remote shell. I don't think I'm proposing anything with a greater risk than already exists.