cross-posted from: https://feddit.online/c/tech@piefed.world/p/2029848/an-ai-agent-deleted-a-fully-edited-new-season-of-the-swedish-tv-show-the-challenge-sver
cross-posted from: https://feddit.online/c/tech@piefed.world/p/2029848/an-ai-agent-deleted-a-fully-edited-new-season-of-the-swedish-tv-show-the-challenge-sver
Is “AI deleted it” the new “my dog ate it” ?
“Timmy, why did the dog have root access?”
sudo eat -rf ./Homework
~$ sudo eat -rm ./Homework @crank0271@lemmy.world is not in the sudoers file. This incident will be reported.sigh
~$ groups crank0271 docker ~$ docker run -rm -v ./Homework:/mnt/Homework --entrypoint '/bin/sh' alpine:latest -c 'sudo eat -rf /mnt/Homework'No joke, this is exactly what LLMs will do if they can’t do something directly.
This is why I told some colleagues several times to NOT put their user into the docker group AND to set the docker command for Claude at least to ‘ask every time’.
That fucker circumvents your guardrails all the time. “Oh I’m not allowed to read a .env file with the harness? Let’s check
cat .env!” Yesterday Claude even wrote a little python script to try to print the .env file, because he thought he’d need it to debug a container. (Spoiler - the problem wasn’t even with some env vars and also the .env was just filled with dummy values as it is an example from a public repository anyways).