323
An AI agent deleted a fully edited new season of the Swedish TV show "The Challenge Sverige", weeks before its Nov 22 premiere, after its producer let the AI into its server. Show pushed to 2027. (www.aftonbladet.se)
submitted 1 day ago by to c/technology@lemmy.world
46 comments fedilink hide all child comments
 

cross-posted from: https://feddit.online/c/tech@piefed.world/p/2029848/an-ai-agent-deleted-a-fully-edited-new-season-of-the-swedish-tv-show-the-challenge-sver

you are viewing a single comment's thread
view the rest of the comments
[–] 15 points 1 day ago (3 children) 
~$ sudo eat -rm ./Homework

@crank0271@lemmy.world is not in the sudoers file. This incident will be reported.

sigh

~$ groups
crank0271 docker

~$ docker run -rm -v ./Homework:/mnt/Homework --entrypoint '/bin/sh' alpine:latest -c 'sudo eat -rf /mnt/Homework'
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 8 points 1 day ago (2 children)

    ~$ groups crank0271 docker

    ~$ docker run -rm....

    No joke, this is exactly what LLMs will do if they can't do something directly.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 5 points 1 day ago (1 child)

    This is why I told some colleagues several times to NOT put their user into the docker group AND to set the docker command for Claude at least to 'ask every time'.

    That fucker circumvents your guardrails all the time. "Oh I'm not allowed to read a .env file with the harness? Let's check cat .env!" Yesterday Claude even wrote a little python script to try to print the .env file, because he thought he'd need it to debug a container. (Spoiler - the problem wasn't even with some env vars and also the .env was just filled with dummy values as it is an example from a public repository anyways).

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 1 day ago*

    Soon it will be "Claude wrote a zero day container escape privilege escalation exploit because it was faster than working within the given limitations". I just don't give any LLM file system access

  • permalink
  • fedilink
  • source
  • parent