fractorial
Joined 4 years ago
Karma
162
Submissions
90
Member since
Feb 9
Joined 4 years ago
Similarly to “one language is best,” saying “one harness is best” is shortsighted in the best possible case.
That being said, Claude Code is bloatware.
> Downstream runtimes that ship their own trust stores (Go, Node.js, Electron, Python certifi, curl, etc.)
At least two of these don’t ship a trust store.
And, no, wrapping claude -p or any other “allowed” use wherein you don’t control the agent loop isn’t the same.
> Note that disabling MPTCP on a program-by-program basis is a fragile mitigation. Accidentally leaving a single MPTCP listener exposed will still leave a system vulnerable. Further, it assumes that all viable exploits for this bug depend on MPTCP. Again, we strongly recommend upgrading to a patched kernel version