Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
ashwinr2002
searching Neon…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
9 ms
·
1.
▲
by
ashwinr2002
6mo ago
Prompt Injections are very very rare these days after the Opus 4.6 update
2.
▲
by
ashwinr2002
7mo ago
This is unreachable?
3.
▲
by
ashwinr2002
7mo ago
minger's a new word
4.
▲
by
ashwinr2002
7mo ago
This is a horrible change! I agree with everything in the article
5.
▲
Show HN: Dangerously-skip-permissions IFF it doesn't WRITE outside Sandbox
(github.com)
1 points
by
ashwinr2002
7mo ago
|
0 comments
6.
▲
by
ashwinr2002
8mo ago
Apologies for the formatting Can we not assume that the plan you just said “ok” to came from a user prompts you made earlier in the chat session and hence does influence this decision process. Another point in the idea is that this trusted
7.
▲
Show HN: Prompt-injection firewall for OpenClaw agents
(github.com)
6 points
by
ashwinr2002
8mo ago
|
3 comments
8.
▲
by
ashwinr2002
8mo ago
I understand that, but how do you come up with the endpoints you want claude to have access to ahead of time? For example, how do you collect all the endpoints that have access to customer info per your example. Thought about it and couldn&
9.
▲
by
ashwinr2002
8mo ago
> With macaroons you can design the authz scheme that you want for any arbitrary API. How would you build such an authz scheme? When claude asks permissions to access a new endpoint, if the user allows it, then reissue the macaroons?
10.
▲
by
ashwinr2002
8mo ago
This seems like an under-rated comment. You are right, this is a vulnerability and the blog doesn't talk about this.
11.
▲
by
ashwinr2002
8mo ago
P.S.: The extension has as many permissions as Claude in Chrome itself. But, the only network requests from the extension are to posthog, just for us to know which features are being used. Here is a youtube video where I show the network re
12.
▲
Show HN: ContextFort – Visibility and controls for browser agents
(contextfort.ai)
14 points
by
ashwinr2002
8mo ago
|
1 comments
13.
▲
by
ashwinr2002
1y ago
Really cool product! Which email providers do you support?