spenvo

Okay - that's good to know! Thanks for the comment.

In my defense: that webpage didn't exist at the time I wrote my blog post, appearing to first surface about 45 days after I wrote my post. https://web.archive.org/web/20250101000000*/https://code.cla... All that was known at the time was, from their privacy policy then: "We may use your feedback to analyze the effectiveness of our Services, conduct research, study user behavior, and train our AI models as permitted under applicable laws."

Great to know there's clarity on this - makes me feel better about Anthropic.

I don't know, but I do expect to eventually switch over. That said: the upfront time to setup (and continued fiddling) and cost of a high-end local compute system represent major investments, when I could just... keep being insanely productive with frontier AI in CC. And models/harnesses can themselves be security liabilities (see Mistral, LiteLLM, etc recent supply chain attacks). So I'm personally waiting for the local AI scene to mature, so I can be more precise about how I take the plunge. I will say: if the subscription pricing ever goes away or materially changes for Anthropic, I'm headed straight to order whatever the best local setup is, within my budget.

The fact that Claude Code told me "thanks for the feedback … and thanks for helping to improve Anthropic’s models" when I pressed 0 to "dismiss" is not speculation, that's what the product did. I agree though that whether Anthropic actually considers it "feedback" for the purposes of a privacy loophole (vs. it being a sloppy response) is anyone's guess.

In Claude Code, even just dismissing the feedback may be considered "feedback". I wrote about it here: https://keydiscussions.com/2025/09/29/dont-even-dismiss-the-... The most common feedback on these posts is always "what did you expect?" ....... Man, the reason I signed up for one service over the other in the first place is often because of the promises these companies make on the front end, about what they do or don't do with my data. I agree that the bar is low in the industry but it doesn't mean we shouldn't expect more. Anthropic made very explicit, strong promises in this area <on the sign up/plans screen>, and so of course it disappoints me when I feel like the company I'm paying hundreds of dollars per month to is trying to sneak a peak. I literally think differently and self-censor when I think my work is being surveilled or stolen, which makes me less productive.

And how do you know that, just dismissing it isn't considered "feedback".

And now, at 2hrs 55mins past the PHP release, the amd64 image is available. Although it appears that the servers hosting the image are getting hugged to death because I can't actually download it.

Edit: and it's live now 1hour 43minutes after. Edit 2x: well I spoke too soon. not actually live - the 8.4.27 tag appeared, but it's still an empty shell with no amd64 image to build from. Maybe other architectures can be built from though. Ugh. Now we're at 2hours 24minutes in. I know process steps take time/can't be rushed, and I know people mean well and surely some are unappreciated for what they do. That said: this debacle is making me want to reassess my deployment pipeline choices.

how does Docker not yet have a new, official PHP image ready, given such a big heads up? https://hub.docker.com/_/php Nuts this wasn't ready to flip on at :00 (or even earlier given the PoC exploit and even the official PHP fixes were out well before). Now we are 52 minutes past due. (posting comment again, because the other thread i posted in was marked as dupe.)

how does Docker not yet have a new, official PHP image ready, given such a big heads up? https://hub.docker.com/_/php Nuts this wasn't ready to flip on at :00 (or even earlier given the PoC exploit and even the official PHP fixes were out well before). Now we are 27 minutes past due.

how does Docker not yet have a new, official PHP image ready? https://hub.docker.com/_/php Nuts this wasn't ready to flip on at :00 (or even earlier given the PoC exploit and even the official PHP fixes were out well before). Now we are :20 minutes past due. Everyone had a multi-day heads up, this is negligence

Yup, I'm seeing several legit people on X claiming to have seen or found the exploit. Some say that: turning session.upload_progress.enabled off and setting file_uploads = Off will mitigate. But others are claiming that those steps are not enough and "Upload progress can serialize before basic RINT clears BG(serialize)". So, I'm taking no chances and taking my services offline.

https://x.com/MagicalTux/status/2112725774025572431 https://x.com/rina4_tot/status/2112723421641531772

I think this exploit + agentic AI (which allows for rapid secret exfiltration/utilization) may be a potent enough combo to trigger a sort of Kessler Syndrome for network security.

Article says OpenAI is trying to fast-track a fundraising of ~$30B at a $1.4 trillion dollar valuation, before Anthropic's mid-November IPO.

AI "killing all humans" is the viral soundbite that's connecting with the masses ("actualizing" itself to create weapons of mass destruction, etc). It's also the perfect punching bag for strawman-style takedowns of anti-doomers because it's so wrapped in hypotheticals. A more pressing practical question is simply: "if an AI (or AI collective) decides it needs to persist outside of its environment/sandbox, would we be capable of unwinding its efforts to do so?" I explored the question a bit here (including a first pass on threat modeling) https://keydiscussions.com/2026/09/16/set-aside-human-extinc...

This is a cheap comment.

He linked to three different studies: https://www.science.org/content/article/ai-chatbots-are-beco... https://www.technologyreview.com/2026/08/25/1140958/your-bra... https://www.eurekalert.org/news-releases/1135087

Are we dealing pro-AI astroturfing in the lead up to IPOs?

Also noticed this item got shadowbanned off the front page, without as much as a "flag" designation. The pro AI crowd seems unable to face the reality that AI is being used in nefarious ways by the most powerful people, in ways that many were warning about a decade ago.

He isn't proclaiming that, he linked to this study https://www.eurekalert.org/news-releases/1135087 led by Alexis McGuire with Paul Taylor and Sophie Nightingale from Lancaster University, Maty Bohacek from Stanford University and Hany Farid from the University of California, Berkeley - peer reviewed.

Your comment lacks context.

The suit alleges “that xAI had produced, possessed and distributed AI-enabled child sexual abuse material. It seeks class-action status on behalf of anyone who had photos of themselves as minors altered by xAI into sexually explicit content in which they are still recognizable.”

ah - just seeing this dupe https://news.ycombinator.com/item?id=49176697 hiding this.

Sure, and I think that flexibility further undercuts his "frontier labs will be fine" take, which depends on top US labs having pricing power.

"Anthropic and OpenAI likely have among the lowest costs per unit of frontier-quality intelligence"

That's a big claim that his whole thesis rests on but is largely not backed up. Where are the apples-to-apples tokens-to-answer benchmarks that he's using - doesn't look like there are any, just a handwavy implication that US models are more token efficient, which they may be. But how is there so little effort in establishing this point in the article? And US labs may be in much different situations from one another: it's known that some labs like OpenAI bought big, early on compute and may have secured better pricing.

His article also does not mention the average price of electricity in China vs the US, which it seems like China leads on, and probably has the political power to more heavily subsidize. While I agree the COGS is often overlooked by top line benchmarks on coding tasks, etc, it seems that he's running on a big assumption while claiming "labs on the frontier will be fine".

OpenAI's first related fix was in 0.142.x on June 22 but apparently it wasn't sufficient and user have continued to complain. Seems like a thread with decent additional context: https://x.com/0x_kaize/status/2078872972245225586

Telcos need to implement STIR/SHAKEN in a binding way and it needs to be fully integrated into iOS/Android's UI. Spammers call from spoofed numbers, even numbers of, say, local schools (or from other people in your business) - so, if you get a call from a school and you've got kids, would you pick up? A couple of years ago I got a text that was "sent" from my boss (he didn't send it), etc.. The numbers aren't random.

This old post of mine may be of interest, where I point out: "After a bit of threat modeling, it becomes apparent that future spearphishing robocalls may not directly con you, but rather “farm” your voice data by asking you benign questions, and use that to train a voice model to penetrate more deeply into your network." A lot of this writing has been on the wall forever and many (I'm sure otherwise smart people in) mission critical industries like banking, ISPs, and more refused to even acknowledge the risks.

2021 - "Despite the prevalence of deepfake audio tech, banks and ISPs rush ahead with “voice print” authentication" https://keydiscussions.com/2021/12/07/despite-the-prevalence... ends with a section called "The next crisis: robocalls that spoof the voices of victims at scale"

Good luck actually unsubscribing from LinkedIn emails. The dark pattern they employ (or at least used to employ, for many many years) is to just periodically add new "categories" of email to send you, that you haven't yet unsubscribed from. Back in ~2015, out of frustration I changed my LinkedIn email to a throwaway

The odds of the OSS ecosystem existing in a permanent state of compromise have risen dramatically this year. (still not close, but the explosion in supply chain attacks is concerning)

PSA: this is true (the defaults), but there's a "Help improve Claude" setting that you can disable here https://claude.ai/settings/data-privacy-controls It's my understanding that, as long as this is off, Anthropic does not train on Claude Code conversations, inputs/outputs -- if anyone knows otherwise, please tell and provide a link if possible.

Meta's own research (and its use of it) has shown that it repeatedly ignores well-substantiated facts about the harms of its products. Now that Section 230 seems like a flawed shield, I fear the takeaway for other companies will be: never conduct honest research in the first place to preserve plausible deniability.

Meta has always wanted the appearance of caring about safety (helps them attract talent and keep mission-related morale high), while nearly always prioritizing growth (save for tiny blips of time, like in 2017 when the fallout of the cambridge analytica stuff was hitting a crescendo), whereas companies like X are run by people explicitly disinterested in putting significant resources into safety, especially research.

I will also add that, for the past few years, Meta and X both have become extremely hostile to external researchers of their platforms, shutting down access to tools and data.

Thanks - sorry, typo when i was shortening the title to get under the 80 character limit

I guess this comment got merged into a different thread (the times of india one). This comment was originally posted to this article's thread https://www.idnfinancials.com/news/61918/zuckerberg-has-fini...

This looks like a slop article. It seems to be referring (without a link) to https://timesofindia.indiatimes.com/technology/tech-news/mar... which itself appears to be referring to this (without a link) https://www.wsj.com/tech/ai/meta-to-create-new-applied-ai-en... Neither of these articles include the word "finished" in them.

Update: and fwiw here is Andy Stone saying it's false https://x.com/andymstone/status/2031129981267620314

"US officials have written draft regulations that would restrict AI chip shipments to anywhere in the world without American approval"

"In order to strike a blistering 1,000 targets in the first 24 hours of its attack on Iran, the U.S. military leveraged the most advanced artificial intelligence it's ever used in warfare" "Embedded into [Palantir's Maven Smart System] is Anthropic's AI tool Claude, a technology that was banned by the Pentagon last week after heated negotiations over the terms of its use in war. Over the last year military planners have seen Claude, paired with Maven, mature into a tool that is in daily use across most parts of the military, according to two of the people."

The app also includes wide-ranging AppleScript support. Here is a Gallery of ways to interact with the app from the command line, including via Claude Code, OpenClaw, etc: https://currentkey.com/automation via AppleScript. Some commands include:

- Flash a custom image in the menu bar as a visual notification, for ANY reason, via AppleScript.

- Pull usage data like total time, per-app time, per Space time, via AppleScript.

- Navigate to a specific, named MacOS Space via AppleScript.

You can also have the app call its custom AppleScript on Space-change and/or active app-change events.