HN #49506819: Breaking Claude Code Opus 5 Auto Mode (~399 pts)
帖子要点 (中文)
Hacker News 引擎头号（≈399 分 / 121 评）：拆 Claude Code Opus 5 Auto Mode 的攻击文。评论里 andai 讲攻击解压目录里的影子 struct.py；colinmarc 说这是在打模型固定爱用 python -c 的习惯；kstenerud 坚持沙箱并关掉不必要的网络；mjmvisser 因此把 VS Code 放进 dev container；Phemist 直接谈默认 Auto 的责任问题。和 Claude Code 271 里「按命令开域名」同读：产品在收默认可达范围，社区仍在验默认 Auto 够不够用。
Key claims (English)
Hacker News top-of-engine (≈399 pts / 121 comments): the Auto Mode attack post on Claude Code Opus 5. In the thread andai walks through an attack that drops a shadowing struct.py into the unpack directory; colinmarc argues this is exploiting the model's habit of falling back to python -c; kstenerud insists on sandboxing and cutting unnecessary network; mjmvisser has moved VS Code into a dev container as a result; Phemist questions responsibility around default Auto. Read alongside v2.1.271's per-command allowed_domains: the product is narrowing its default reachable surface, while the community is still testing whether default Auto is enough.
Obsidian 证据摘录
「『Breaking Claude Code Opus 5 Auto Mode』约 399 分 / 121 评，仍是引擎 HN 栏第一。评论里 andai 讲攻击解压目录里的影子struct.py；colinmarc 说这是在打模型固定爱用python -c的习惯；kstenerud 坚持沙箱并关掉不必要的网络；mjmvisser 因此把 VS Code 放进 dev container；Phemist 直接谈默认 Auto 的责任问题。」——Hermes 定时任务/last30days/2026-09-15-ai-coding-agents-brief.md L53-55
链接
- HN：https://news.ycombinator.com/item?id=49506819
- brief：Hermes 定时任务/last30days/2026-09-15-ai-coding-agents-brief.md