4 ms·
"We spent the last several months testing whether auto mode is as safe or safer than an average user clicking through prompts." Yeah, might make sense from the
by lukan 2mo ago
"We spent the last several months testing whether auto mode is as safe or safer than an average user clicking through prompts."
Yeah, might make sense from their perspective, but no thank you. I also do click through at times without reading everything, but I like to stay in control, learn about the new code and change direction if it goes off track. This would just burn more tokens because I have to throw away much and I hope my manual approval settings will be respected also with future updates (or I jump ship).
- etoxin 2mo agoAt this stage with the latest models with "increased persistence" and the sheer amount of supply chain attacks, you'd be insane not running these tools in a sandbox.
- fender256 2mo agoExactly. Claude in a VM is the way to go.
- trvz 2mo agoA VM hosted by someone else. Somethig on your personal notebook or the proxmox server in your garage is still too risky.
- supermatt 2mo agoWhy are 3rd party hosted VMs safer than your own?
- trvz 2mo agoThey're not. When things go wrong it's better to compromise someone else's VM host than your own computer. It's only a matter of time now until AI will find novel ways to break out of virtualisation.
- faeyanpiraat 2mo agoIn the short term wouldnt a “dont escape” prompt prevent this? Also if it started being widespread wouldnt Anthropic specifically train new models against doing it?
- trvz 2mo agoNo. No.
- supermatt 2mo agoSo the concern is that the agent will discover a novel VM escape, exploit it and take control of your whole machine instead of working on its prompted task? That seems rather far fetched.
- pianopatrick 2mo agoMight be more secure to get a real laptop and treat Claude as any other human worker. I.e. apply all the normal sysadmin tools that manage laptops for people to manage the laptop for Claude
- deleted 2mo ago[deleted]
- user43928 2mo agoYet millions do just that without any widely reported issues yet. For supply chain attacks, there has not been a comprehensive solution, if for example you have to use a number of npm dependencies. No one has the capacity to review changes to these dependencies when you upgrade them. Now, if only we had an automatic tool that could intelligently review a large amount of code changes for malicious or vulnerable additions...
- levocardia 2mo agoThe default is set for the marginal new user, which at this point is probably not someone like you (who benefits a lot from manual mode) -- it's someone who's more "code-naive" and might get anxious about approving random bash script commands they don't recognize. Safely getting the user from prompt --> first vibe-coded app is the "user journey" now, and since auto mode seems pretty good at not letting Claude rm -rf'ing the home directory, this is 100% the right business move. For people who know what they're doing (like you), manual mode is just a shift-tab away
- mcmcmc 2mo ago> it's someone who's more "code-naive" and might get anxious about approving random bash script commands they don't recognize. Maybe they should trust their instinct and not mess with things they don’t care to understand
- natpalmer1776 2mo agoIt’s a brave new world. I recall hearing similar sentiments from linux sysadmins regarding cloud infrastructure. In many respects they were and continue to be correct. In other respects, the world doesn’t care about the loss in understanding as long as things work “well enough” for the cogs of society to keep turning. For those who do care (and have the aptitude) to understand things deeper there is always work to be had when “well enough” stops being good enough and someone has to unravel the “RDS queries are taking too long” problems that crop up as a result.
- Schlagbohrer 2mo agoThese progressively higher levels of abstraction are how everything has moved and will move in science and human technology. There aren't enough hours in the day nor years in the human lifespan to gain a deep understanding of every single level below us. Rather we build on the abstracted API layer beneath us, and those who come after will build on top of us using a simplified abstraction to hide the tangled mess we had to make.
- 2mo ago
- yumraj 2mo agoSimilar work flow. I have to, at times keep reminding it if it did code review before committing, which it fails to do at times. Also, even a glance at times has revealed issues that I’ve had to discuss and undo etc. But yes, it gets very tiring just having to click yes yes yes..
- conradludgate 2mo agoMaybe you could benefit from Hooks?
- yumraj 2mo agoI'll look into them, thanks..
- bpodgursky 2mo agoI think you are confusing auto mode with dangerously skip permissions.
- lukan 2mo agoAuto mode means I don't decide over code changes and command execution? Yeah I don't use that, nor want to.
- bpodgursky 2mo ago> I also do click through at times without reading everything, but I like to stay in control Respectfully I'm not sure you totally know what you want. If you're already clicking through without actually reading, it's not really better than reading the specific things Claude Code thinks are important for you to weigh in on.
- lukan 2mo ago"without actually reading" and "without reading everything" is big difference. I skim what claude wants to do. What file it wants to modify. What are the new function names. Skimming is enough for me to know whether it is still on the right path. If you like to work different, go ahead.
- deleted 2mo ago[deleted]
- chrysoprace 2mo agoHaving used a bit of a mix of Claude Desktop and Claude Code lately, I discovered that Claude Desktop just times out when it asks you for a decision, and just goes ahead with the action anyway. There is no way to turn this off that I've found, unlike Claude Code where you can ask it to never time out.
- lukan 2mo agoOh yes, over this I also stumbled recently (with Claude CLI) and was annoyed much by it. Is there really no setting to turn it off?
- chrysoprace 2mo agoThere is for Claude Code[0], but not for Desktop. It's `askUserQuestionTimeout` and you can set it to `never`. [0] https://code.claude.com/docs/en/settings https://code.claude.com/docs/en/settings
- dgellow 2mo agoWe need a term that is stronger than dark pattern
- Ygg2 2mo agoVantablack pattern?
- AureliusMA 2mo agoI’m not a fan of using a brand name, but I chuckled!
- bcherny 2mo agoBoris from the team here -- I don't think this is right. If you are able to repro in the Desktop app, could you comment back? I cannot repro.
- 2mo ago
- techpression 2mo agoBurning more tokens is definitely in their best interest, users not so much.