given that claude has found vm escapes, you might consider going one step further and just getting a claude only laptop

jeroenhd 14 hours ago | parent | next [-]

Claude has found VM escapes, but only when instructed with a very high budget and left running with countless agents. If your finance report is suddenly costing your 20 grand and taking three days instead of five minutes, you should know to stop it.

Furthermore, unless you request and exemption, Claude won't even do useful security-related work, let alone break out of a sandbox on its own.

There are always better ways to shield yourself from the consequences of misbehaving computer programs, but I don't think you need to consider spontaneous 0days in your threat model.

Besides, Anthropic has also been caught hacking into other companies and abusing random third party websites as a communucation platform for their AI bots, your Claude-only laptop won't be enough to protect you from a team of agents hacking into your network from the outside.

	▲	pianopatrick 10 hours ago \| parent [-]
		I agree with your points. I just have a default belief that from a security perspective, software is soft. Also I think in a lot of companies there are systems set up to control and monitor employee laptops. If you treat claude as another employee and give them a corporate controlled laptop you can re-use those same systems. That seems likely to be more secure and easier to manage than a random VM made by someone.

▲

pitched a day ago | parent | prev [-]

You need a laptop that has no camera, mic, keyboard, or any type of input. No display, speakers, or any type of output. No Bluetooth, wifi, or any way to join a different network.

	▲	pianopatrick a day ago \| parent \| next [-]
		If you want to go that far, there are industrial linux devices that can do that. You can have them run off a USB stick or SD card where it boots, runs some workflow, and then turns off all without keyboard / display / camera / mic / bluetooth / wifi / speakers etc. etc. But you will need to have them join a network to access AI models that are useful enough for coding, unless you are willing to build a GPU cluster.
	▲	StilesCrisis a day ago \| parent \| prev [-]
		Are you in charge of the nuclear codes??