Of course not, the punishment is actually what happens because you disregarded and didn’t follow the law.

My journey over the past few years has been one of borderline AI skeptic for its use in coding to having tried Claude Code a month ago and being unlikely to ever go back to coding big changes without it. Most queries I would have used search for in the past are now done in AI models as a first step.

However, one thing that concerns me is whether I am using best practices around agent safety and code protection. I have turned off the “Help improve Claude” toggle in the web panel for Claude settings. Do we believe that’s enough to really stop them (the companies who took any data they could find to make this tool) from using or training on our code? Are all the companies and people using this product just entrusting their proprietary code bases to these AI companies? Is it enough for me to be on the $20/mo Claude Pro plan or do I have to pony up for a Teams plan to protect my data? Which companies do we trust more in this space?

In terms of agent guardrails, I have set up Claude CLI on a cloud VPS Ubuntu host, as its own user that has access to read and modify the code, but no commit ability or git credentials or access to data on my personal machines. The repos are in a directory with group write access and then my personal user account does all commits and pushes, to ensure that Claude has no tangible way to destroy any data that isn’t backed up offsite in git. I don’t provide any of the environment variable credentials necessary to actually run the software, or access to any real data, so testing and QA is still something I do manually and pushing the changes to another machine.

I use it iteratively on individual features or bug fixes. I still have to go back and forth with it (or drop into my editor) a decent amount when it makes mistakes or to encourage better architectural decisions, but it is overall quite fun and exciting for me to use (at this early stage of learning and exploration) and seems to speed up development for my use case in a major way (solo dev SaaS site with web, iOS, and Android native apps + many little, half-finished side projects and ideas).

Does HN have any links or resources that round up the state of the art best practices around AI use for those who are cautious and not wanting to give it the keys to kingdom, but trying to take advantage of this new coding frontier in a safe way? What commands or settings would be typically considered safe to always allow so it doesn’t need to ask for permission as often? What security or privacy toggles do I want to consider in Claude (or other agents). Is it good to subscribe to a couple services and have one review the other’s code as a first step? I hit usage limits on the $20 Claude Pro, should I go to Max or spread horizontally across different AI models? Thanks for any tips!

Comments URL: https://news.ycombinator.com/item?id=46996368

Points: 2

# Comments: 1

For one, it has large borrowing costs. You already admit that short sellers haven’t fared well, and shorting over a long time period can be very costly. Concocting a short position to offset one’s long-term index holdings requires being fairly accurate with timing and is very different than just wishing it wasn’t in there because you imagine that eventually the bill on that will come due, even if it’s years down the line.

If I’m wrong, I’d love to see a cheap way to do it over a 5-10 year period.

https://thehill.com/hilltv/what-americas-thinking/494602-pol...

You’re choosing to avoid all of the other cost savings that will come from eliminating private health insurance and having a single payer who can effectively negotiate with providers without the goal of taking a slice of profits from an ever bigger pie.

They are, however, a large part of the system that no one likes to deal with and can be fully eliminated without obvious negative consequences.

Health insurance doesn’t provide health care and is a purely extractive rent-seeking business. The article I posted even explains how single payer can help drive health care provider rates lower, as you now have a single, powerful entity (Medicare) negotiating against doctors, hospitals and drug companies.

And this “one player” (health insurance companies) heavily lobby against the implementation of single payer health care system. And their profit caps ensure that their goal is to grow the cost of medical care so they can take an ever higher profit in absolute dollars.

Also, the same CMS statistics you cite can be combined with other reports to conclude that 500 billion dollars of excess administrative costs PER YEAR are attributable to our lack of a single payer system — something UHC has lobbied heavily against in order to protect their profits over the improved health care of the average American. You can read the numbers here:

https://www.peoplespolicyproject.org/2024/12/10/health-care-...

“private insurers currently have administrative costs that are 1,000 percent what they would be under single-payer while hospitals currently have administrative costs that are 158 percent what they would be under single-payer. The excess administrative expenses of both the payers and the providers are because of the multi-payer private health insurance system that we have.

When you add it all up, excess administrative expenses — defined as administrative expenses we have under the current system that we would not have under single-payer — are equal to 1.8 percent of GDP, or $528 billion per year.”

Another reason your pleading falls on deaf ears is that, sure, provider payments can be reduced (and this addressed in the above article), but at the end of the day, private insurance is a purely rent-seeking enterprise that provides no value to Americans while these “overpaid providers” are actually delivering the care.

Comments URL: https://news.ycombinator.com/item?id=12290427

Points: 4

# Comments: 1

It is clear that many of their customers do not own or otherwise control all of the rights to the content they host on Amazon's servers. For instance, take tarsnap or SmugMug. They both host clients' property on Amazon servers. Now, while those companies may control some of the rights to the information they are storing , it is clear that those companies do not own nor control "all rights" to that content. SmugMug cannot legally license or resell my photos to others, for example.

As for their claim that it puts people in danger, they cite not a single confirmed case where this has happened.