[koolba]

> Claude realized that I had to approve the use of such commands, so to get around this, it chose to put them in a shell script and execute the shell script.

This sounds exactly like what anybody working sysops at big banks does to get around change controls. Once you get one RCE into prod, you’re the most efficient man on the block.

[deburo]

Reminds me of firewalls with a huge backlist, but they don't block known VPNs.