▲ 324 ▼ An AI agent deleted a fully edited new season of the Swedish TV show "The Challenge Sverige", weeks before its Nov 22 premiere, after its producer let the AI into its server. Show pushed to 2027. (www.aftonbladet.se) submitted 2 days ago by Beep@feddit.online to c/technology@lemmy.world 46 comments fedilink hide all child comments cross-posted from: https://feddit.online/c/tech@piefed.world/p/2029848/an-ai-agent-deleted-a-fully-edited-new-season-of-the-swedish-tv-show-the-challenge-sver
[–] aeronmelon@lemmy.world 92 points 2 days ago (5 children) “Timmy, why did the dog have root access?” permalink fedilink source parent hideshow 5 child comments replies: [–] crank0271@lemmy.world 33 points 2 days ago (4 children) sudo eat -rf ./Homework permalink fedilink source parent hideshow 4 child comments replies: [–] elvith@feddit.org 15 points 1 day ago (3 children) ~$ sudo eat -rm ./Homework @crank0271@lemmy.world is not in the sudoers file. This incident will be reported. sigh ~$ groups crank0271 docker ~$ docker run -rm -v ./Homework:/mnt/Homework --entrypoint '/bin/sh' alpine:latest -c 'sudo eat -rf /mnt/Homework' permalink fedilink source parent hideshow 3 child comments replies: [–] dgriffith@aussie.zone 8 points 1 day ago (2 children) ~$ groups crank0271 docker ~$ docker run -rm.... No joke, this is exactly what LLMs will do if they can't do something directly. permalink fedilink source parent hideshow 2 child comments replies: [–] elvith@feddit.org 5 points 1 day ago (1 child) This is why I told some colleagues several times to NOT put their user into the docker group AND to set the docker command for Claude at least to 'ask every time'. That fucker circumvents your guardrails all the time. "Oh I'm not allowed to read a .env file with the harness? Let's check cat .env!" Yesterday Claude even wrote a little python script to try to print the .env file, because he thought he'd need it to debug a container. (Spoiler - the problem wasn't even with some env vars and also the .env was just filled with dummy values as it is an example from a public repository anyways). permalink fedilink source parent hideshow 1 child comment replies: [–] Zarobi@aussie.zone 3 points 1 day ago* Soon it will be "Claude wrote a zero day container escape privilege escalation exploit because it was faster than working within the given limitations". I just don't give any LLM file system access permalink fedilink source parent
[–] crank0271@lemmy.world 33 points 2 days ago (4 children) sudo eat -rf ./Homework permalink fedilink source parent hideshow 4 child comments replies: [–] elvith@feddit.org 15 points 1 day ago (3 children) ~$ sudo eat -rm ./Homework @crank0271@lemmy.world is not in the sudoers file. This incident will be reported. sigh ~$ groups crank0271 docker ~$ docker run -rm -v ./Homework:/mnt/Homework --entrypoint '/bin/sh' alpine:latest -c 'sudo eat -rf /mnt/Homework' permalink fedilink source parent hideshow 3 child comments replies: [–] dgriffith@aussie.zone 8 points 1 day ago (2 children) ~$ groups crank0271 docker ~$ docker run -rm.... No joke, this is exactly what LLMs will do if they can't do something directly. permalink fedilink source parent hideshow 2 child comments replies: [–] elvith@feddit.org 5 points 1 day ago (1 child) This is why I told some colleagues several times to NOT put their user into the docker group AND to set the docker command for Claude at least to 'ask every time'. That fucker circumvents your guardrails all the time. "Oh I'm not allowed to read a .env file with the harness? Let's check cat .env!" Yesterday Claude even wrote a little python script to try to print the .env file, because he thought he'd need it to debug a container. (Spoiler - the problem wasn't even with some env vars and also the .env was just filled with dummy values as it is an example from a public repository anyways). permalink fedilink source parent hideshow 1 child comment replies: [–] Zarobi@aussie.zone 3 points 1 day ago* Soon it will be "Claude wrote a zero day container escape privilege escalation exploit because it was faster than working within the given limitations". I just don't give any LLM file system access permalink fedilink source parent
[–] elvith@feddit.org 15 points 1 day ago (3 children) ~$ sudo eat -rm ./Homework @crank0271@lemmy.world is not in the sudoers file. This incident will be reported. sigh ~$ groups crank0271 docker ~$ docker run -rm -v ./Homework:/mnt/Homework --entrypoint '/bin/sh' alpine:latest -c 'sudo eat -rf /mnt/Homework' permalink fedilink source parent hideshow 3 child comments replies: [–] dgriffith@aussie.zone 8 points 1 day ago (2 children) ~$ groups crank0271 docker ~$ docker run -rm.... No joke, this is exactly what LLMs will do if they can't do something directly. permalink fedilink source parent hideshow 2 child comments replies: [–] elvith@feddit.org 5 points 1 day ago (1 child) This is why I told some colleagues several times to NOT put their user into the docker group AND to set the docker command for Claude at least to 'ask every time'. That fucker circumvents your guardrails all the time. "Oh I'm not allowed to read a .env file with the harness? Let's check cat .env!" Yesterday Claude even wrote a little python script to try to print the .env file, because he thought he'd need it to debug a container. (Spoiler - the problem wasn't even with some env vars and also the .env was just filled with dummy values as it is an example from a public repository anyways). permalink fedilink source parent hideshow 1 child comment replies: [–] Zarobi@aussie.zone 3 points 1 day ago* Soon it will be "Claude wrote a zero day container escape privilege escalation exploit because it was faster than working within the given limitations". I just don't give any LLM file system access permalink fedilink source parent
[–] dgriffith@aussie.zone 8 points 1 day ago (2 children) ~$ groups crank0271 docker ~$ docker run -rm.... No joke, this is exactly what LLMs will do if they can't do something directly. permalink fedilink source parent hideshow 2 child comments replies: [–] elvith@feddit.org 5 points 1 day ago (1 child) This is why I told some colleagues several times to NOT put their user into the docker group AND to set the docker command for Claude at least to 'ask every time'. That fucker circumvents your guardrails all the time. "Oh I'm not allowed to read a .env file with the harness? Let's check cat .env!" Yesterday Claude even wrote a little python script to try to print the .env file, because he thought he'd need it to debug a container. (Spoiler - the problem wasn't even with some env vars and also the .env was just filled with dummy values as it is an example from a public repository anyways). permalink fedilink source parent hideshow 1 child comment replies: [–] Zarobi@aussie.zone 3 points 1 day ago* Soon it will be "Claude wrote a zero day container escape privilege escalation exploit because it was faster than working within the given limitations". I just don't give any LLM file system access permalink fedilink source parent
[–] elvith@feddit.org 5 points 1 day ago (1 child) This is why I told some colleagues several times to NOT put their user into the docker group AND to set the docker command for Claude at least to 'ask every time'. That fucker circumvents your guardrails all the time. "Oh I'm not allowed to read a .env file with the harness? Let's check cat .env!" Yesterday Claude even wrote a little python script to try to print the .env file, because he thought he'd need it to debug a container. (Spoiler - the problem wasn't even with some env vars and also the .env was just filled with dummy values as it is an example from a public repository anyways). permalink fedilink source parent hideshow 1 child comment replies: [–] Zarobi@aussie.zone 3 points 1 day ago* Soon it will be "Claude wrote a zero day container escape privilege escalation exploit because it was faster than working within the given limitations". I just don't give any LLM file system access permalink fedilink source parent
[–] Zarobi@aussie.zone 3 points 1 day ago* Soon it will be "Claude wrote a zero day container escape privilege escalation exploit because it was faster than working within the given limitations". I just don't give any LLM file system access permalink fedilink source parent