4 ms·

You're not alone. I think the author was doing some sort of circular prompt injection between two instances of Claude? The author claims "I'm just scaffolding

You're not alone. I think the author was doing some sort of circular prompt injection between two instances of Claude? The author claims "I'm just scaffolding a project" but that doesn't appear to be the case, or what resulted in the ban...

lazyfanatic42 9mo ago
Author really comes off unhinged throughout the article to be frank.
- superb_dev 9mo ago
  Did we read the same article? The author comes of as pretty frustrated but not unhinged
  - ryandrake 9mo ago
    I wouldn't say "unhinged" either, but maybe just struggling to organize and express thoughts clearly in writing. "Organizations of late capitalism, unite"?
    - Bootvis 9mo ago
      The author was frustrated that the error message identified him as an organisation (that was disabled) and mockingly refers to himself as the (disabled) organisation in the post. At least, that’s my reading but it appears it confuses about half of the commenters here.
      - ryandrake 9mo ago
        I think if one's readers need an "ironic euphemism decoder glossary" just to understand the message, it could use a little re-writing.
        layer8 9mo ago
        It was perfectly understandable to me. Maybe cultural differences? You seem to be American, OP Portuguese, and myself European as well.
        ashirviskas 9mo ago
        Another European chiming in, I enjoyed OPs article.
        superb_dev 9mo ago
        I’m American and it made sense
    - genewitch 9mo ago
      https://en.wikipedia.org/wiki/Late_capitalism https://en.wikipedia.org/wiki/Late_capitalism https://community.bitwarden.com/t/re-enabling-a-disabled-organization/67466 https://community.bitwarden.com/t/re-enabling-a-disabled-org... https://community.meraki.com/t5/Dashboard-Administration/disabled-organization/m-p/269725 https://community.meraki.com/t5/Dashboard-Administration/dis... the former i have heard for a couple decades, the latter is apparently a term of art to prevent hurt feelings or lawsuits or something. Google thinks i want ADA style organizations, but it's AI caught on that i might not mean organizations for disabled people btw "ADA" means Americans with Disabilities Act. AI means Artificial Intelligence. A decade is 10 years long. "term of art" is a term of art for describing stuff like jargon or lingo of a trade, skill, profession. Jargon is specialized, technical language used in a field or area of study. Lingo pins to jargon, but is less technical. Google is a company that started out crawling the web and making a web search site that they called a search engine. They are now called Alphabet Company (ABC). Crawling means to iteratively parse the characters sent by a webserver and follow links therein, keeping a copy of the text from each such html. HTML is hypertext markup language, hypertext is like text, but more so. Language is how we communicate. I can go on? p.s. if you want a better word, your complaint is about the framing. you didn't gel with the framing of the article. My friend, who holds a doctorate, defended a thesis about how virtually every platform argument is really a framing issue. platform as in, well, anything you care to defend. mac vs linux, wifi vs ethernet, podcasts vs music, guns vs no guns, red vs blue. If you can reduce the frame of the context to something both parties can agree to, you can actually hold a real, intellectual debate, and get at real issues.
- pjbeam 9mo ago
  My take was more a kind of amusing laughing-through-frustration but also enjoying the ride just a little bit insouciance. Tastes vary of course, but I enjoyed the author's tone and pacing.
- staticman2 9mo ago
  Author thinks he's cute to do things like mention Google without typing Google but I wouldn't call him unhinged.
rvba 9mo ago
What is wrong with circular prompt injection? The "disabled organization" looks like a sarcastic comment on the crappy error code the author got when banned.
- darkwater 9mo ago
  > What is wrong with circular prompt injection? That you might be trying to jailbreak Claude and Anthropic does not like that (I'm not endorsing, just trying to understand).
redeeman 9mo ago
i have no idea what he was actually doing either, and what exactly is it one isnt allowed to use claude to do?
falloutx 9mo ago
This tracks with Anthropic, they are actively hostile to security researchers.
Romario77 9mo ago
One Claude agent told other Claude agent via CLAUDE.md to do things certain way. The way Claude did it triggered the ban - i.e. it used all caps which apparently triggers some kind of internal alert, Anthropic probably has some safeguards to prevent hacking/prompt injection and what the first Claude did to CLAUDE.md triggered this safeguard. And it doesn't look like it was a proper use of the safeguard, they banned for no good reason.
layer8 9mo ago
It wasn’t circular. TFA explains how the author was always in the loop. He had one Claude instance rewrite the CLAUDE.MD of another Claude instance whenever the second one made a mistake, but relaying the mistake to the first instance (after recognizing it in the first place) was done manually by the author.
healsdata 9mo ago
The author code have easily shared the last version of Claude.md that had the all caps or whatever, but didn't. Points to something fishy in my mind.
- BoorishBears 9mo ago
  The whole thing reads like LLM psychosis.
- ribosometronome 9mo ago
  They did. >If you want to take a look at the CLAUDE.md that Claude A was making Claude B run with, I commited it and it is available here. https://github.com/HugoDaniel/boreDOM/blob/9a0802af16f5a1ff177799404c34ce5444345915/boreDOMCLI/cli.js#L129 https://github.com/HugoDaniel/boreDOM/blob/9a0802af16f5a1ff1...
cryptonector 9mo ago
I suspeect that having Claudes talking to Claudes is a very bad idea from Anthropic's point of view because that could easily consume a ton of resources doing nothing useful.

lazyfanatic42 9mo ago

Author really comes off unhinged throughout the article to be frank.

superb_dev 9mo ago
Did we read the same article? The author comes of as pretty frustrated but not unhinged
- ryandrake 9mo ago
  I wouldn't say "unhinged" either, but maybe just struggling to organize and express thoughts clearly in writing. "Organizations of late capitalism, unite"?
  - Bootvis 9mo ago
    The author was frustrated that the error message identified him as an organisation (that was disabled) and mockingly refers to himself as the (disabled) organisation in the post. At least, that’s my reading but it appears it confuses about half of the commenters here.
    - ryandrake 9mo ago
      I think if one's readers need an "ironic euphemism decoder glossary" just to understand the message, it could use a little re-writing.
      - layer8 9mo ago
        It was perfectly understandable to me. Maybe cultural differences? You seem to be American, OP Portuguese, and myself European as well.
        ashirviskas 9mo ago
        Another European chiming in, I enjoyed OPs article.
        superb_dev 9mo ago
        I’m American and it made sense
  - genewitch 9mo ago
    https://en.wikipedia.org/wiki/Late_capitalism https://en.wikipedia.org/wiki/Late_capitalism https://community.bitwarden.com/t/re-enabling-a-disabled-organization/67466 https://community.bitwarden.com/t/re-enabling-a-disabled-org... https://community.meraki.com/t5/Dashboard-Administration/disabled-organization/m-p/269725 https://community.meraki.com/t5/Dashboard-Administration/dis... the former i have heard for a couple decades, the latter is apparently a term of art to prevent hurt feelings or lawsuits or something. Google thinks i want ADA style organizations, but it's AI caught on that i might not mean organizations for disabled people btw "ADA" means Americans with Disabilities Act. AI means Artificial Intelligence. A decade is 10 years long. "term of art" is a term of art for describing stuff like jargon or lingo of a trade, skill, profession. Jargon is specialized, technical language used in a field or area of study. Lingo pins to jargon, but is less technical. Google is a company that started out crawling the web and making a web search site that they called a search engine. They are now called Alphabet Company (ABC). Crawling means to iteratively parse the characters sent by a webserver and follow links therein, keeping a copy of the text from each such html. HTML is hypertext markup language, hypertext is like text, but more so. Language is how we communicate. I can go on? p.s. if you want a better word, your complaint is about the framing. you didn't gel with the framing of the article. My friend, who holds a doctorate, defended a thesis about how virtually every platform argument is really a framing issue. platform as in, well, anything you care to defend. mac vs linux, wifi vs ethernet, podcasts vs music, guns vs no guns, red vs blue. If you can reduce the frame of the context to something both parties can agree to, you can actually hold a real, intellectual debate, and get at real issues.
pjbeam 9mo ago
My take was more a kind of amusing laughing-through-frustration but also enjoying the ride just a little bit insouciance. Tastes vary of course, but I enjoyed the author's tone and pacing.
staticman2 9mo ago
Author thinks he's cute to do things like mention Google without typing Google but I wouldn't call him unhinged.

rvba 9mo ago

What is wrong with circular prompt injection? The "disabled organization" looks like a sarcastic comment on the crappy error code the author got when banned.

darkwater 9mo ago
> What is wrong with circular prompt injection? That you might be trying to jailbreak Claude and Anthropic does not like that (I'm not endorsing, just trying to understand).

redeeman 9mo ago

i have no idea what he was actually doing either, and what exactly is it one isnt allowed to use claude to do?

falloutx 9mo ago

This tracks with Anthropic, they are actively hostile to security researchers.

Romario77 9mo ago

One Claude agent told other Claude agent via CLAUDE.md to do things certain way. The way Claude did it triggered the ban - i.e. it used all caps which apparently triggers some kind of internal alert, Anthropic probably has some safeguards to prevent hacking/prompt injection and what the first Claude did to CLAUDE.md triggered this safeguard. And it doesn't look like it was a proper use of the safeguard, they banned for no good reason.

layer8 9mo ago

It wasn’t circular. TFA explains how the author was always in the loop. He had one Claude instance rewrite the CLAUDE.MD of another Claude instance whenever the second one made a mistake, but relaying the mistake to the first instance (after recognizing it in the first place) was done manually by the author.

healsdata 9mo ago

The author code have easily shared the last version of Claude.md that had the all caps or whatever, but didn't. Points to something fishy in my mind.

BoorishBears 9mo ago
The whole thing reads like LLM psychosis.
ribosometronome 9mo ago
They did. >If you want to take a look at the CLAUDE.md that Claude A was making Claude B run with, I commited it and it is available here. https://github.com/HugoDaniel/boreDOM/blob/9a0802af16f5a1ff177799404c34ce5444345915/boreDOMCLI/cli.js#L129 https://github.com/HugoDaniel/boreDOM/blob/9a0802af16f5a1ff1...

cryptonector 9mo ago

I suspeect that having Claudes talking to Claudes is a very bad idea from Anthropic's point of view because that could easily consume a ton of resources doing nothing useful.