• VibeSurgeon@piefed.social
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    2
    ·
    17 hours ago

    Dangerously-skip-permission is carte blanche for the model to do whatever it pleases with your system. If you happen to have access to a production database on your system, then the model also has access to it, should you use that option.

    • Eager Eagle@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      11 hours ago

      that assumes

      1. the user does have access to a production db;
      2. the agent has access to a terminal from which they can reach the production machine (not in a container, different network, or similar);
      3. access does not require interaction (like entering password);
      4. the agent deliberately decides to access a production database to solve a development problem, and that was not the user requesting it;
      5. the agent manages to find the database credentials in production;
      6. the agent is left unattended.

      Possible? Sure. It’s also possible that I drink half a bottle of vodka on a Friday night and mess up with production.

    • minfapper@piefed.social
      link
      fedilink
      English
      arrow-up
      6
      arrow-down
      2
      ·
      edit-2
      12 hours ago

      Yes, but the question is why the hell do you have access to a production database in the first place?!

      And if so, how is it on the same machine you can run Claude code on?!

      • boonhet@sopuli.xyz
        link
        fedilink
        arrow-up
        5
        ·
        11 hours ago

        I’ve worked at places where senior devs have access to prod for emergency fixes but usually the procedure is to use a VPN AND an ssh key with a passphrase. Usually.

      • VibeSurgeon@piefed.social
        link
        fedilink
        English
        arrow-up
        2
        ·
        11 hours ago

        I’ve worked at several places where I’ve been able to access production databases.

        No need to be so dramatic about it, really.

      • Ethan@programming.dev
        link
        fedilink
        English
        arrow-up
        3
        ·
        12 hours ago

        Startups and small companies where there simply aren’t enough resources to set up proper operational controls

        • Bakkoda@lemmy.world
          link
          fedilink
          arrow-up
          4
          ·
          11 hours ago

          No no no I’m not running Dev ops on the production system. I’m running prod ops on the developer system.