Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

So, $100B+ valuation companies get essentially free access to the frontier tools with disabled guardrails to safely red team their commercial offerings, while we get "i won't do that for you, even against your own infrastructure with full authorization" for $200/month. Uh-huh.


I'm sympathetic to your point, but I'm sure there are heightened trust levels between the participating orgs and confidentiality agreements out the wazoo.

How does public Claude know you have "full authorization" against your own infra? That you're using the tools on your own infra? Unless they produce a front-end that does package signing and detects you own the code you're evaluating.

What has it stopped you from doing?


You can do pretty much anything you want with public claude if you self-report to it that you have been properly authorized.


Yes, and that's normal. Coordinated disclosure is standard practice when the risk of public disclosure is unacceptable.


Risk for who? It feels unfair that the risk to myself is ignored "for the greater good of everyone else."


Welcome to the world of security engineering, in which your needs do not in fact trump the needs of everyone else.


It's not just me against the world. It's users of big tech vs everyone else. Will my browser get these security patches? Or will only Chrome get them and everyone else gets to be vulnerable because that would endanger users of big tech.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: