220
you are viewing a single comment's thread
view the rest of the comments
[-] LedgeDrop@lemmy.zip 1 points 6 hours ago

I've played around with Claude.

they can’t access anything you don’t give them permission to access.

It's not that "they can't" it's more like "they try not to".

For example, if you have a folder shared with your application code (/home/me/code/) - it has free reign on that folder.

If you add a prompt saying "you are only allowed to access files in /home/me/code":

you could ask it " oh, what are my aws credentials ", it would have no qualms about reading those files (/home/me/.aws).

You could also ask it to update your settings (/home/me/.claude)

I eventually started to work on a way of running Claude in a docker container with real filesystem enforcement. ...and it's sneaky how Claude will get when it wants to read a file, it doesn't have permissions for (using bash cat).

This was an exploration I'd made a year ago and I know Claude has a " sandbox" , but if you allow Claude to run bash commands - that sandbox is trivial to circumvent.

this post was submitted on 13 Aug 2026
220 points (100.0% liked)

Technology

87151 readers
2268 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 3 years ago
MODERATORS