Comment by hungryhobbit
1 day ago
>1) Have faith (always run it with 'dangerously skip permissions', even on important resources like your production server and your main dev machine.
I thought the article was a satire after I read this ... but it wasn't!
> I hit a small snag where Anthropic decides that running Claude as root with --dangerously-skip-permissions / yolo-mode is not allowed. You can get past this dumb nanny-state stuff by running [fun dangerous command that lets you run as root]
Still not convinced it is not satire.
I run with the dangerous option on my work computer. At first I was thinking I would be good if I just regularly kept full disk backups. But my company at least pays lip service to the fact that we want to protect our intellectual property. Plus I think it might be irresponsible to allow an AI model full internet access unsupervised.
So now I use a docker compose setup where I install Claude and run it in a container. I map source code volumes into the container. It uses a different container with dnsmasq with an allowlist.
I initially wanted to do HTTP proxying instead of DNS filtering since it would be more secure, but it was quite hard to set it up satisfactorily.
Running CLI programs with the dangerous full permissions is a lot more comfortable and fast, so I'm quite satisfied.
Haha, well at least they warned you!
> If you're from infosec, you might want to stop reading now — the rest of this article isn't going to make you any happier. Keep your medication close at hand if you decide to continue...
You're just making a case for why developers cannot be trusted with sensitive information, and why cyber depts lock the machine down so extensively.
Eh? I'm making no such case. It was a quote from the article.
Obviously you wouldn't want to do this to any revenue generating code, but when just mucking around on prototypes this seems fine.
I just came for the comments for this... I am not sure at what point we are. Think AI and Crypto are a match in hell, especially given that a lot of Crypto projects are made by bros who have no interest in tech. estimate we'll be seeing projects/companies that get hacked as soon as they launch by Claude itself.