upvote

points

by xamde13 hours ago |
comments
upvoteby GCUMstlyHarmls13 hours ago|
next
[-]
3. Sandbox escapes, misalignment and Outlook. What we're doing to prevent a re-occurrence. (anthropic.com)

94 points by cloudbreaker 22 hours from now | flag | hide | 64 comments

reply
upvoteby lionkor12 hours ago|
parent|
next
[-]
And honestly, that's our mistake! We should have caught this inverted dependency earlier and didn't.
reply
upvoteby dcl12 hours ago|
parent|
prev|
[-]
lol, lmao even
reply
upvoteby browolf13 hours ago|
prev|
next
[-]
all the people who were using copilot are now trying to use claude and overloaded it?
reply
upvoteby meerita11 hours ago|
prev|
next
[-]
Yes, it is. I logged in two days ago. Now I have to relogging again and I can't because of M365 down for 15hs.
reply
upvoteby justinclift13 hours ago|
prev|
next
[-]
> Can this be fall-out from the Microsoft outage?

Copilot is down too, so it's probably Microsoft engineers trying to vibecode their replacement Azure infrastructure before the current garbage fire finishes burning out.

reply
upvoteby not_a_bot_4sho8 hours ago|
parent|
[-]
Microsoft employees don't have Claude access
reply
upvoteby justinclift28 minutes ago|
parent|
[-]
Maybe up until this started... :)
reply
upvoteby uxhacker13 hours ago|
prev|
next
[-]
Yes, both are caused by it been Friday 13th.
reply
upvoteby stefan_13 hours ago|
prev|
[-]
Isn't magic email login link only great? What a shambles.
reply
upvoteby OJFord13 hours ago|
parent|
next
[-]
I absolutely hate it, can't understand how that's all they offer (or Google SSO). It's bad enough when the password option is just really hidden and non-obvious (like Notion iirc), not having it at all is ridiculous.

I don't have that email account on my phone. So to log in, I have to open my laptop, get the 'magic' link, find a way to send it to myself on my phone that doesn't make a request (e.g. for an unfurl) expiring it, and then open it on my phone to log in. So magic.

reply
upvoteby vbezhenar12 hours ago|
parent|
next
[-]
If you open login form and link on different devices, you'll get code to type, no need to send link.

So basically you start login on phone, keep page open. Open laptop, click on link on laptop and you'll get a code. You type that code on your phone and that's all.

reply
upvoteby OJFord11 hours ago|
parent|
[-]
Even if that's correct, I should not need to use a second device to log in because of some asinine decision not to have a password field.

Solving problems that don't exist, and creating problems that don't need to.

reply
upvoteby vidarh12 hours ago|
parent|
prev|
next
[-]
There are a number of clipboard sync apps, but personally I swear by simply having an E2E encrypted chat app on both your desktop and phone that lets you send messages to yourself. Serves both the clipboard usecase and as a general "notes to self" space.
reply
upvoteby OJFord9 hours ago|
parent|
[-]
Sure. Shouldn't have to.
reply
upvoteby lima4 hours ago|
parent|
prev|
[-]
You can add a passkey.
reply
upvoteby FinnKuhn13 hours ago|
parent|
prev|
next
[-]
SSO logins don't work either.
reply
upvoteby ninjin-carh13 hours ago|
parent|
prev|
next
[-]
Time to support passkey so we don't need to keep opening email to use a magic link?
reply
upvoteby EduardoBautista8 hours ago|
parent|
[-]
The thing is, they frequently ask for a passkey to avoid the magic link but after setting it up multiple times, I have never once been asked to use the passkey.
reply
upvoteby AndroTux13 hours ago|
parent|
prev|
next
[-]
Especially awesome when they don't allow you to change your email address ever again.
reply
upvoteby vbezhenar12 hours ago|
parent|
[-]
I requested Mythos access and was granted it. But now apparently I need to use Google Sign In on my account instead of email link, as email link is not secure enough. But my email is not google, it's my custom domain. Now I don't even know what to do. I don't want to buy google apps or whatever it's called just to be able to use Google SSO with my custom domain; and I don't want to register completely new account for gmail either. It's a mess.
reply
upvoteby nicce13 hours ago|
parent|
prev|
[-]
> Isn't magic email login link only great? What a shambles.

They just outsource the security into your email provider.

reply
upvoteby abyssin12 hours ago|
parent|
[-]
Isn't the email provider almost always one of the links of the security chain? Then, why not accept it and simplify the chain?
reply
upvoteby nicce12 hours ago|
parent|
[-]
Usually it is the weakest link in the chain, and you are encouraged to switch to proper 2FA or Passkey instead. So even if the email is compromised, other accounts are not compromised.
reply