314
you are viewing a single comment's thread
view the rest of the comments
[-] elvith@feddit.org 13 points 19 hours ago
~$ sudo eat -rm ./Homework

@crank0271@lemmy.world is not in the sudoers file. This incident will be reported.

sigh

~$ groups
crank0271 docker

~$ docker run -rm -v ./Homework:/mnt/Homework --entrypoint '/bin/sh' alpine:latest -c 'sudo eat -rf /mnt/Homework'
[-] dgriffith@aussie.zone 7 points 18 hours ago

~$ groups crank0271 docker

~$ docker run -rm....

No joke, this is exactly what LLMs will do if they can't do something directly.

[-] elvith@feddit.org 3 points 17 hours ago

This is why I told some colleagues several times to NOT put their user into the docker group AND to set the docker command for Claude at least to 'ask every time'.

That fucker circumvents your guardrails all the time. "Oh I'm not allowed to read a .env file with the harness? Let's check cat .env!" Yesterday Claude even wrote a little python script to try to print the .env file, because he thought he'd need it to debug a container. (Spoiler - the problem wasn't even with some env vars and also the .env was just filled with dummy values as it is an example from a public repository anyways).

[-] Zarobi@aussie.zone 3 points 11 hours ago* (last edited 11 hours ago)

Soon it will be "Claude wrote a zero day container escape privilege escalation exploit because it was faster than working within the given limitations". I just don't give any LLM file system access

this post was submitted on 15 Oct 2026
314 points (93.4% liked)

Technology

88814 readers
5600 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 3 years ago
MODERATORS