Comment by jstanley
1 day ago
> Should Claude have access to user details?
This is hard to avoid. All it needs to do is make a git commit and look in the git log and it will find out who you are.
1 day ago
> Should Claude have access to user details?
This is hard to avoid. All it needs to do is make a git commit and look in the git log and it will find out who you are.
At least we, as users, have control of what information Claude has access to in this case:
etc.
That's barely control. There's going to be 100 ways your email leaks.
Yeah but leaking because Anthropic leaked your email vs. you underengineered your sandbox are two very different failure modes imo.
LLMs are supposed to be a panacea for building digital systems. A sandbox inside which an LLM can operate freely surely should be one of the first systems we should all strive to engineer.
If we can't properly sandbox an LLM, I would say that's a pretty good sign that LLMs are not a panacea for building digital systems.
1 reply →
Why does it need to perform a commit to read the log?
The repo's other commits could be from someone else - whereas a commit it wrote itself is guaranteed to be from the correct/local account.
Can it not check the current credentials that it would potentially be using to make said commit?
1 reply →