314
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 15 Oct 2026
314 points (93.4% liked)
Technology
88814 readers
5600 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 3 years ago
MODERATORS
sigh
No joke, this is exactly what LLMs will do if they can't do something directly.
This is why I told some colleagues several times to NOT put their user into the docker group AND to set the docker command for Claude at least to 'ask every time'.
That fucker circumvents your guardrails all the time. "Oh I'm not allowed to read a .env file with the harness? Let's check
cat .env!" Yesterday Claude even wrote a little python script to try to print the .env file, because he thought he'd need it to debug a container. (Spoiler - the problem wasn't even with some env vars and also the .env was just filled with dummy values as it is an example from a public repository anyways).Soon it will be "Claude wrote a zero day container escape privilege escalation exploit because it was faster than working within the given limitations". I just don't give any LLM file system access