3 ms·
Putting these NanoClowns inside a container will not protect you from all kinds of safety hazards.
by amelius 9mo ago
Putting these NanoClowns inside a container will not protect you from all kinds of safety hazards.
- arcanemachiner 9mo agoWearing a seatbelt will not protect you from all kinds of car accidents.
- amelius 9mo agoYes. That's why you don't put a Clown behind the steering wheel.
- bdcravens 9mo agoTesla Robotaxi says hold my beer
- weinzierl 9mo agoIt is more like getting in the car with Stuntman Mike. The risk is not that the driver might make a mistake but that it actively turns against you and a container is not a security boundary against an adversary.
- snuxoll 9mo ago"Because it was a 50-50 shot on whether you'd be going left or right [...]" Yeah, that about sums up how terrifying it is to give these agents so much access to things.
- InsideOutSanta 9mo agoWearing a helmet will not protect you from all injuries caused by jumping off a cliff. Point is, don't jump off a cliff.
- troupo 9mo agoThe nature of these tools is that you tell them not to jump off a cliff, so they ride the bicycle over it. Or a car. Or "you're completely right. I assumed it was possible to fly". Or...
- refsys 9mo agoor you pass by graffiti telling it to jump off a cliff, written in iambic pentameter (or whatever is the jailbreak meta of the month)
- andai 9mo agoThat's the fun part! You spend all day hardening it... run it in docker in a vm on a separate machine. And then you hook it up to your gmail and give it unrestricted internet access :)
- plagiarist 9mo agoAn exciting bet on whether the prompt injection will come from the open web or via email!
- mh2266 9mo agohttps://xkcd.com/1200/ https://xkcd.com/1200/
- motoboi 9mo agoLet’s be honest. The whole thing is just the prevent Claude from “rm -rf / “. It’s it someone is trying to avoid the thing talking to the internet or reading your emails, it’s just that it sometimes has the strange itch to change some files outside of the project.
- yoyohello13 9mo agoI’m not sure what docker is helping with that an unprivileged Linux user account doesn’t already do. The scary stuff with claws is unrelated to process isolation.