That sort of risk could be controlled. Goldman has control of those desktops and could ensure Claude Code is always sandboxed, or they could offer it through a remotely hosted platform. I’d be very surprised if they were not already doing at least the former.

No, I think the risks they are talking about would include things like financial risk due to bad trades based on misinformation from buggy code that the authors don’t understand. This sort of policy pivot happens after an Incident that had a Financially Material Impact.

They also cited productivity concerns, which is also something I’ve observed: some people waste a lot of their time and other’s time due to using these tools to do work they do not understand.

▲

lukebuehler 6 hours ago | parent | next [-]

Remote-hosted agents are available in most places. BUT they are not interesting, because they do not have access to all the user's data.

People really want to run agents on their data.

Re sandboxing: I dont know Goldman's particulars, but most enterprises lock down all sandboxing tech on workstations. So I assume this is actually harder than it seems. So people just run it directly on the machine.

The article is referring to the dilemma of the trifecta twice.

▲

mickael-kerjean 2 hours ago | parent | next [-]

> People really want to run agents on their data.

That's exactly the gap I've been working on https://github.com/mickael-kerjean/fdrive you mount your existing data, apply control / permission and can monitor everything the agents are doing with your data: https://www.filestash.app/agents/

▲

swores 5 hours ago | parent | prev [-]

What logic led to rules that block sandboxes but allow AI tools like that?

	▲	verbify 4 hours ago \| parent [-]
		vt-x is often disabled because there's malware that has exploited it in the past.

▲

rienbdj 6 hours ago | parent | prev | next [-]

Seems hard to do well in practice.

Can the agent read the internet for context? What if the fetch reveals a secret?

▲

frereubu 6 hours ago | parent | prev | next [-]

> Goldman has control of those desktops and could ensure Claude Code is always sandboxed

Agents have already broken out of what were supposed to be sandboxes in the networks of the companies that are supposed to understand what they do. Do you really think banks would be any better?

▲

Terr_ 6 hours ago | parent | next [-]

Some of that was negligence, but beyond expertise, we also need to think about which companies are willing to invest in the necessary barriers and accept the limitations that comes from obeying them.

It may just be there's no safe nexus for asbestos floor tiles, no matter how skilled the installers are.

▲

catlifeonmars 5 hours ago | parent | prev | next [-]

> Do you really think banks would be any better?

Absolutely, yes.

If you’re talking about OpenAI and Anthropic that’s an extremely low bar.

May I ask what in particular gives you confidence that these two companies know what they are doing wrt cybersecurity.

	▲	frereubu 5 hours ago \| parent [-]
		> May I ask what in particular gives you confidence that these two companies know what they are doing wrt cybersecurity. It's not that I think OpenAI and Anthropic know what they're doing - although I can see why my slightly flippant comment might make you think that - but that I just don't trust anyone with these agents, especially when the whole point of using them would be to do that with such critical data.

▲

doginasuit 6 hours ago | parent | prev [-]

If you mean the HuggingFace hack, that wasn't so much a sandbox as a wide open door with a tiny sign that said "please don't leave".

Supposed to understand, yes. I think a highschool class could do better.

▲

Jagerbizzle 6 hours ago | parent | prev [-]

I got a series of Teams messages from some random person at the work address yesterday asking me to fulfill some access request to them. I noted by the part of their org (wildly different from mine) that they were looking for a different person.

I responded by saying they were looking for someone else, and got a response to the effect of “oops that was Copilot, sorry to bother you”

Read into this what you will.