Remix.run Logo
hypfer 9 hours ago

People do realize that if they're doing this, they're not feeding "just" code into some probably logging cloud API but literally anything (including, as mentioned here, bank statements), right?

Right?

RIGHT??????

Are you sure that you need to grant the cloud full access to your desktop + all of its content to sort elements alphabetically?

jjcm 8 hours ago | parent | next [-]

Some do, some don't.

The reality is there are some of us who truly just don't care. The convenience outweighs the negative. Yesterday I told an agent, "here's my api key and my root password - do it for me". Privacy has long since been dead, but at least for myself opsec for personal work is too.

subsection1h 4 hours ago | parent | next [-]

> Privacy has long since been dead, but at least for myself opsec for personal work is too.

Hacker News in 2026.

TeMPOraL 3 hours ago | parent [-]

Paranoia is justified if it actually serves some purpose. Staying paralyzed and not doing anything because Someone Is Reading Your Data is not serving much of anything. Hint: those Someones have better things to do. LLM vendors really don't care about your bank statements, and if they were ever in a position to look, they'd prefer not to have them, as it just creates legal and reputational risks for them.

bdangubic 3 hours ago | parent [-]

> as it just creates legal and reputational risks for them.

Unfortunately I laughed reading this as there is never neither reputation nor legal consequences in the US of A. They can leak your entire life into my console including every account and every password you have and all PII of your entire family and literally nothing would happen… everything is stored somewhere and eventually will be used when “growth” is needed. some meaningless fines will be paid here and there but those bank statements will make their way to myriad of business that would drool to see them

TeMPOraL 3 hours ago | parent [-]

The issue of consequences of data leaks, though real and something I find outrageous, is orthogonal to this discussion. When talking about sending personal or sensitive data to AI companies, people are not worrying about data leaks - they're worrying about AI company doing some kind of Something to it, and Somehow profit off selling their underpants.

(And yes, no one really says what that Something or Somehow may be, or how their underpants play into this.)

bdangubic an hour ago | parent [-]

sorry I did not mean leak, I meant “leak”

people should 1,000,000% be worried about AI company doing something kind of something with it which they are doing as we speak and if not now will be profiting soon-ish

hypfer 8 hours ago | parent | prev | next [-]

I mean eventually, some adversarial entity will use this complete lack of defenses to hurt even the most privileged people in some way, so.

Unless of course they too turn to apathy and stop caring about being adversarial, but given the massive differences in quality of life between the west and the rest of the world, I'm not so sure about this.

That is of course a purely probabilistic thing and with that hard to grasp on an emotional level. It also might not happen during ones own lifetime, but that's where children would usually come in. Though, yeah, yeah, it's HN. I know I know.

nearlyepic 4 hours ago | parent | prev | next [-]

> Privacy has long since been dead, but at least for myself opsec for personal work is too.

This is such an incredibly loser attitude and is why we can't have nice things.

keybored 7 hours ago | parent | prev | next [-]

HN is now where I get my daily does[1] of apathetic indifference/go with the flow attitude.

[1] * dose

yoyohello13 an hour ago | parent | next [-]

Sometimes I wonder how we got here. Data breaches everywhere, my 64gb of ram i7 workstation slowing to a crawl when opening a file browser, online privacy getting increasingly more impossible. Then I read HN and it all makes sense.

cindyllm 7 hours ago | parent | prev | next [-]

[dead]

koakuma-chan 6 hours ago | parent | prev [-]

Is there a place where you get things that are greater and more noble than apathetic indifference/go with the flow attitude?

subsection1h 4 hours ago | parent [-]

The folks at the Qubes OS forum care about security, unlike the vast majority of HN users nowadays:

https://forum.qubes-os.org/

dcchambers 7 hours ago | parent | prev | next [-]

> The convenience outweighs the negative. Yesterday I told an agent, "here's my api key and my root password - do it for me".

Does the security team at your company know you're doing this?

Security as a whole is inconvenient. That doesn't mean we should ignore it.

phero_cnstrcts 3 hours ago | parent | prev [-]

That’s just sad.

AstroBen 8 hours ago | parent | prev | next [-]

When choosing between convenience and privacy, most people seem to choose convenience

TeMPOraL 3 hours ago | parent | next [-]

Obviously. Those who chose otherwise have all died out long ago, starving to death in their own apartments, afraid that someone might see them if they ever went outside.

xpe 22 minutes ago | parent | prev [-]

> When choosing between convenience and privacy, most people seem to choose convenience

But they wish it would have been convenient to choose privacy.

For many, it may be rational to give away privacy for convenience. But many recognize the current decision space as suboptimal.

Remember smoke-infused restaurants? Opting out meant not going in at all. It was an experience that came home with you. And lingered. It took a tipping point to "flip" the default. [1]

[1]: The Public Demand for Smoking Bans https://econpapers.repec.org/article/kappubcho/v_3a88_3ay_3a... "Because smoking bans shift ownership of scarce resources, they are also hypothesized to transfer income from one party (smokers) to another party (nonsmokers)."

TIPSIO 8 hours ago | parent | prev | next [-]

Have you ever used any Anthropic AI product? You cannot literally do anything without big permissions, warnings, or annoying always-on popup warning you about safety.

raesene9 8 hours ago | parent | next [-]

Claude code has a YOLO mode, and from what I've seen a lot of heavy users, use it.

Fundamentally any security mechanism which relies on users to read and intelligently respond to approval prompts is doomed to fail over time, even if the prompts are well designed. Approval fatigue will kick in and people will just start either clicking through without reading, or prefer systems that let them disable the warnings (just as YOLO mode is a thing in Claude code)

TIPSIO 8 hours ago | parent [-]

Yes it basically does! My point was that I really doubt Anthropic will miss making it clear to users that this is manipulating their computer

fragmede 3 hours ago | parent [-]

Users are asking it to manipulate their computer for them, so I don't think that parts being lost.

hypfer 8 hours ago | parent | prev [-]

No, of course not. Well.. apart from their API. That is a useful thing.

But you're missing the point. It is doing all this stuff with user consent, yes. It's just that the user fundamentally cannot provide informed consent as they seem to be out of their minds.

So yeah, technically, all those compliance checkboxes are ticked. That's just entirely irrelevant to the point I am making.

Wowfunhappy 8 hours ago | parent [-]

> It's just that the user fundamentally cannot provide informed consent

The user is an adult. They are capable of consenting to whatever they want, no matter how irrational it may look to you.

hypfer 8 hours ago | parent [-]

Uh, yes?

What does that refute?

Wowfunhappy 8 hours ago | parent [-]

You just said the user is incapable of providing informed consent.

In any context, I really dislike software that prevents me from doing something dangerous in order to "protect" me. That's how we get iOS.

The user is an adult, they can consent to this if they want to. If Anthropic is using dark patterns to trick them that's a different story--that wouldn't be informed consent--but I don't think that's happening here?

hypfer 8 hours ago | parent [-]

This is not about if people should be allowed to harm themselves though.

Legally, yes. Yes, everyone can do that.

The question though is if that is a good thing. Do we just want to look away when large orgs benefit from people not realizing that they're doing self-harm? Do we want to ignore the larger societal implications of this?

If you want to delete your rootfs, be my guest. I just won't be cheering for a corp that tells you that you're brilliant and absolutely right for doing so.

I believe it's a bad thing to frame this as a conflict between individual freedom and protecting the weak(est) parts of society. I don't think that anything good can come out of seeing the world that way.

motoboi 7 hours ago | parent | prev | next [-]

I have my bank statements on a drive on a cloud. We are way past that phase.

koakuma-chan 6 hours ago | parent | next [-]

I send my bank statements to Gemini to analyze. It's not like bank statements contain anything too sensitive.

subsection1h 4 hours ago | parent | prev [-]

WTF. I have a separate computer solely for personal finance, domain registration, DNS management, and the associated email account. If I didn't use multiple computers this way, I'd go back to using Qubes OS.

waterTanuki 3 hours ago | parent | prev | next [-]

There has to be a way to set permissions right? The demo video they provided doesn't even need permission to read file contents, just read the file titles and sort them into folders based on that. It would be a win-win anyways, less tokens going into Claude -> lower bill for customer, more privacy, and more compute available to Anthropic to process more heavy workloads.

fragmede 3 hours ago | parent | prev | next [-]

But I don't want alphabetical. Alphabetical is just a known sort order so I can find the file I want. How about it sorts by "this is the file you're looking for"?

hahahahhaah 5 hours ago | parent | prev [-]

Ship has sailed. I have my deepest secrets in Gmail and Docs. We need big tech to make this secure as possible from threats. Scammers and nations alike.