5 ms·

What does this even mean?

infecto 4mo ago
Just going on and on about compliance when you have no idea about the details. It’s a classic example of how IT fails most large orgs.
- Ucalegon 4mo ago
  Compliance isn't required due to a vendor. Compliance is due to the legal obligations thanks to local regulations and obligations that are defined through contracts with 3rd parties. Saying 'found the Microsoft person' expresses a lack of understanding of the domain.
  - infecto 4mo ago
    You kind of just proved my point. Sorry I should not have been joking but i don’t think you have a grasp what’s going on around you. This is how IT acts in my enterprise orgs. There is absolutely a need for compliance and governance but unfortunately the people in these roles are typically not technically minded and have low incentives to innovate so you get these folks only really arguing for their jobs.
    - Ucalegon 4mo ago
      Cool story bro. Do you think the MSFT sales person, or anyone who has the financial incentive to innovate, doesn't want you to innovate? They want you on Azure and O365 regardless, they don't care. Hell, Microsoft will give you will give you 150k [0] of credits to do so. But keep talking as if you have some magical, unique, special insight that escapes contracts and the law, compared to the people who, sadly, have to deal with reality. [0] https://www.microsoft.com/en-us/startups https://www.microsoft.com/en-us/startups
      - infecto 4mo ago
        What is your deal about contract law? It’s not some mystical thing. You can get red lines with Anthropic, you can get a DPA with Anthropic. You keep going on and on about governance and contract law on a thread about how Claude Code is pretty useful for nontechnical people. Risk is always nonzero but you can already today get pretty comfortable with most of these orgs with some customization in the contracts.
        caminante 4mo ago
        > You can get red lines with Anthropic, you can get a DPA with Anthropic. IMHO, 1. Dismissing attorney client privilege is reckless 2. and the vast majority of users aren't aware of what "customization in the contracts" is needed to enable autonomous agents or if it's already contractually allowed. This is still a fair question: > Do you, and those executives, own the risks associated with that practice? Are those risks actually indemnified?
        infecto 4mo ago
        I think you guys are hitting on very specific issues that would only be constructive in the context of the business group using these tools. There is a discussion but I don’t really see the point in this thread. I see some folks from more of an IT background pointing fingers instead of the discussion at hand. Absolutely groups need to work with their legal representation to figure out an acceptable level of risk. Everything has non-zero risk. But again none of these specific points really hit on anything for this thread.
        Ucalegon 4mo ago
        Does Anthropic's DPA provide indemnity to code thats produced from the product and any damages associated with security vulnerabilities within that code? We are talking about vibe coded applications by executives and the risks that are associated with that, nothing within a DPA covers that. Please, be my guest, link an Anthropic DPA which includes indemnity for damages associated with the code produced. Again, you keep showing your lacking of understanding of the domain in some really fundamental ways which shows that you haven't negotiated B2B contracts nor have you held a position of responsibility where you hold liability. But keep responding because this feels more like therapy for you, and your feelings about people like me, rather than the realities of the exposure that come from vibe coded applications for executives.

Just going on and on about compliance when you have no idea about the details. It’s a classic example of how IT fails most large orgs.

Ucalegon 4mo ago
Compliance isn't required due to a vendor. Compliance is due to the legal obligations thanks to local regulations and obligations that are defined through contracts with 3rd parties. Saying 'found the Microsoft person' expresses a lack of understanding of the domain.
- infecto 4mo ago
  You kind of just proved my point. Sorry I should not have been joking but i don’t think you have a grasp what’s going on around you. This is how IT acts in my enterprise orgs. There is absolutely a need for compliance and governance but unfortunately the people in these roles are typically not technically minded and have low incentives to innovate so you get these folks only really arguing for their jobs.
  - Ucalegon 4mo ago
    Cool story bro. Do you think the MSFT sales person, or anyone who has the financial incentive to innovate, doesn't want you to innovate? They want you on Azure and O365 regardless, they don't care. Hell, Microsoft will give you will give you 150k [0] of credits to do so. But keep talking as if you have some magical, unique, special insight that escapes contracts and the law, compared to the people who, sadly, have to deal with reality. [0] https://www.microsoft.com/en-us/startups https://www.microsoft.com/en-us/startups
    - infecto 4mo ago
      What is your deal about contract law? It’s not some mystical thing. You can get red lines with Anthropic, you can get a DPA with Anthropic. You keep going on and on about governance and contract law on a thread about how Claude Code is pretty useful for nontechnical people. Risk is always nonzero but you can already today get pretty comfortable with most of these orgs with some customization in the contracts.
      - caminante 4mo ago
        > You can get red lines with Anthropic, you can get a DPA with Anthropic. IMHO, 1. Dismissing attorney client privilege is reckless 2. and the vast majority of users aren't aware of what "customization in the contracts" is needed to enable autonomous agents or if it's already contractually allowed. This is still a fair question: > Do you, and those executives, own the risks associated with that practice? Are those risks actually indemnified?
        infecto 4mo ago
        I think you guys are hitting on very specific issues that would only be constructive in the context of the business group using these tools. There is a discussion but I don’t really see the point in this thread. I see some folks from more of an IT background pointing fingers instead of the discussion at hand. Absolutely groups need to work with their legal representation to figure out an acceptable level of risk. Everything has non-zero risk. But again none of these specific points really hit on anything for this thread.
      - Ucalegon 4mo ago
        Does Anthropic's DPA provide indemnity to code thats produced from the product and any damages associated with security vulnerabilities within that code? We are talking about vibe coded applications by executives and the risks that are associated with that, nothing within a DPA covers that. Please, be my guest, link an Anthropic DPA which includes indemnity for damages associated with the code produced. Again, you keep showing your lacking of understanding of the domain in some really fundamental ways which shows that you haven't negotiated B2B contracts nor have you held a position of responsibility where you hold liability. But keep responding because this feels more like therapy for you, and your feelings about people like me, rather than the realities of the exposure that come from vibe coded applications for executives.