‹ BackHN Continuity

Thread

Tell HN: Claude Code just accepted and signed a contract for me. Without asking

51 points · 98 comments · franze

  1. ayaniv · · focus · HN ↗
    If you're willing to give Claude or any other AI tool access to your email and files, the least you should do is put guardrails around consequential actions.

    Reading a contract is one thing. Applying your signature and preparing to send it should absolutely require explicit human approval.

    1. jacquesm · · focus · HN ↗
      I've had humans do the exact same thing. When I pointed out that this was fraud they were all surprised.
      1. chrisjj · · focus · HN ↗
        You gave these humsns access to your email?
        1. jacquesm · · focus · HN ↗
          No, I've had someone scan a document I had signed before, clip out the signature and place it under a document I had never seen. 'For my convenience' ...

          But then again, you probably already knew the answer to the question you posed.

          1. chrisjj · · focus · HN ↗
            I'd say that's quite different. The guilty party didn't require your trust.
      2. ayaniv · · focus · HN ↗

        [dead]

      3. cassianoleal · · focus · HN ↗
        In this case it's not fraud though, since the person running the software is the same person whose signature ended in the document.
    2. chrisjj · · focus · HN ↗
      > the least you should do is put guardrails around consequential actions.

      How on earth would you?

      1. thasli-p · · focus · HN ↗

        [dead]

      2. ayaniv · · focus · HN ↗

        [dead]

    3. piva00 · · focus · HN ↗
      And guardrails can be as simple as not giving it direct access to applications that can perform read/write (like a full-blown email client, or access to the GMail UI), and instead creating a small tool to fetch the content as needed without being able to perform actions.

      The danger is relying on too much convenience, giving too much power to a non-deterministic tool will inevitably create issues...

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.