News for hackers. Stuff that matters.

A comment on Goldman Sachs Is Pulling Claude Code from Its Bankers and Traders. Parent comment

Re:Goldman Sachs Is Pulling Claude Code from Its Bankers and... by gr_norm on Sunday November 08, 2026 @05:01PM (#50417822)
The filtering done by auto mode might (usually) catch accidental prompt injection, but isn't effective against actual attacks: https://embracethered.com/blog/posts/2026/breaking-claude-co...

(Anthropic themselves acknowledges this; see the end of the post.)

[ Parent | on HN ]
Re:Goldman Sachs Is Pulling Claude Code from Its Bankers and... by zingar on Sunday November 08, 2026 @06:04PM (#50418529)
What are the sandboxing / isolation options that would protect against attacks like this?
[ Parent | on HN ]
Re:Goldman Sachs Is Pulling Claude Code from Its Bankers and... by juliie on Sunday November 08, 2026 @06:24PM (#50418769)
Running Claude code in an isolated, temporary VM, with no access to memory is a good start. You give it your repo, prompt and you get back PRs. Claude code on web is a convenient way to do that.
[ Parent | on HN ]
Re:Goldman Sachs Is Pulling Claude Code from Its Bankers and... by pianopatrick on Sunday November 08, 2026 @09:09PM (#50420105)
given that claude has found vm escapes, you might consider going one step further and just getting a claude only laptop
[ Parent | on HN ]
Re:Goldman Sachs Is Pulling Claude Code from Its Bankers and... by pitched on Sunday November 08, 2026 @09:50PM (#50420411)
You need a laptop that has no camera, mic, keyboard, or any type of input. No display, speakers, or any type of output. No Bluetooth, wifi, or any way to join a different network.
[ Parent | on HN ]
Re:Goldman Sachs Is Pulling Claude Code from Its Bankers and... by Uehreka on Sunday November 08, 2026 @06:24PM (#50418770)
Who says that such options necessarily need to exist?
[ Parent | on HN ]
Re:Goldman Sachs Is Pulling Claude Code from Its Bankers and... by malfist on Sunday November 08, 2026 @07:22PM (#50419331)
Your employer worried about exfiltration
[ Parent | on HN ]
Re:Goldman Sachs Is Pulling Claude Code from Its Bankers and... by hoppp on Sunday November 08, 2026 @07:22PM (#50419329)
I configured remote VPS and cloudflare sandboxes to run my agents.
[ Parent | on HN ]