felixrieseberg

Felix from Anthropic here.

We’re working with Cursor on this incident, but it wasn’t a compromise of Anthropic’s systems or employee laptops. A malicious actor used access to Cursor’s marketplace to publish a tampered copy of the Claude Code extension, which we didn’t build or publish. The versions on our official channels are not affected and this only impacts Cursor users.

Felix from Anthropic here.

We’re working with Cursor on this incident, but it wasn’t a compromise of Anthropic’s systems or employee laptops. A malicious actor used access to Cursor’s marketplace to publish a tampered copy of the Claude Code extension, which we didn’t build or publish. The versions on our official channels are not affected and this only impacts Cursor users.

Thanks for sharing, I hadn't seen it before and really liked watching it.

Ironically, this is the only part I was supposed to do by hand and didn’t give to Claude - making sure the HTTP redirects are setup correctly. Can’t believe I didn’t notice that. Anyway, you can blame dumb dumb me, not Claude.

I think we probably disagree on what level of abstraction means “personal”, but this website feels deeply personal to me. It existed in my head before it existed on a computer. I understand the argument that any form of expression needs to involve labor closer to the raw source material, but then again, I’ve never bought the argument that painters need to mix their own colors for a painting to be theirs. Having worked various layers of the web rendering stack, it also never made a lot of sense to me that you must use a certain layer to be considered “low enough”. Whenever someone claims that it’s JavaScript in Three.js, I immediately suspect, maybe unfairly, that the person has only the faintest idea of how many systems turn their loose instructions and turned them into pixels on their screen.

Hi, this is my team! Happy to answer any questions.

There's a lot in this launch, but the core idea is to simplify the product while giving users access to more capabilities. You no longer need to know ahead of time how much work a conversation might involve. If you're at your computer, Claude can use your local files and apps. If you close your laptop, Claude can keep working on its own computer.

This launch also lets you use Claude Design, Claude Docs, and Claude Slides directly from conversations. That's possible because we made Artifacts much more powerful: whenever Claude makes you an app, website, design system, or anything else, it can deploy an artifact with multiplayer features and databases.

As many of you probably know from your own work, giving users more power while making the experience simpler is really, really hard. It took many iterations to get to this version. We're far from done, but I expect people will be able to do much more while having to think about it less.

This is beautiful, the title alone gave me a good chuckle.

Thank you! I'll fix both of these pronto

Hi, Felix from Anthropic here. I work on Claude Cowork and Claude Code.

Claude Cowork uses the Claude Code agent harness running inside a Linux VM (with additional sandboxing, network controls, and filesystem mounts). We run that through Apple's virtualization framework or Microsoft's Host Compute System. This buys us three things we like a lot:

(1) A computer for Claude to write software in, because so many user problems can be solved really well by first writing custom-tailored scripts against whatever task you throw at it. We'd like that computer to not be _your_ computer so that Claude is free to configure it in the moment.

(2) Hard guarantees at the boundary: Other sandboxing solutions exist, but for a few reasons, none of them satisfy as much and allow us to make similarly sound guarantees about what Claude will be able to do and not to.

(3) As a product of 1+2, more safety for non-technical users. If you're reading this, you're probably equipped to evaluate whether or not a particular script or command is safe to run - but most humans aren't, and even the ones who are so often experience "approval fatigue". Not having to ask for approval is valuable.

It's a real trade-off though and I'm thankful for any feedback, including this one. We're reading all the comments and have some ideas on how to maybe make this better - for people who don't want to use Cowork at all, who don't want it inside a VM, or who just want a little bit more control. Thank you!