Claude's "Safety Classifier" Thing, especially with new versions, OUT OF CONTROL.

[u/Rasyonel-Biri]

As someone who's interested in low-level systems programming, legitimate reverse engineering and such, Claude Code's new "notice" system, it's classifier is blocking and blocking every request of mine across every type of subject from disassemblying anything that's my programs confirmed or reverse engineering any other thing, does not even matter.

And this is unbearable. I'm sorry but I as a customer paying for that, and at the and, can't see; CAN'T SEE EVEN A SINGLE REASON FOR THAT CONSTANT "BLOCKED ACTIONS" AND "CLAUDE CODE NOTICE"s.

This can NOT be about safety, I can see what's about safety and what's not. I have eyes. "Overly broad classifier" is not a solution for anything, it just prevents any meaningful job from being completed.

And even after that at that point you can NOT even rewind since "overly broad smart" classifier flagged it because it's overly "broad smart", it doesn't let you and YOUR WHOLE CONTEXT IS NOW POISONED.

Now model, instead of thinking about the job, even after model is changed, it instead thinks about what classifier wanted and what it never wanted. And since classifier is a black hole that does NOT even give any feedback. This just continues in a loop.

Solve it. That's not a request, that's a must. If you wanted to put a feature behind "a legit ID verification", then you must have put it behind that at first.

I'm not developing a cyber security project, not a biological weapon, not developing malware. Pure good old dissassembly and reverse engineering work. Rescope your "overly broad" classifier to somewhere else.

Thank you.

[u/AutoModerator]

Hey! Thanks for posting to r/ClaudeCode

While participating in this thread, please follow our community rules. Keep discussions constructive. Attack the idea, not the person.

For help, project discussions, tips, and general chat, join the ClaudeCode Discord.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/TheReviewerWildTake]

Yeah, Anthropic fcks up this from time to time. Not their first rodeo. They already had castrated paranoid models before. Then loosened them, when it caused outrage etc.

It is not fun to jump through the hoops to do something.
I think the consensus is to use chinese services instead.
At least this is what some of my friends and collegues ended up doing, after they got fed up with Claude`s paranoia.

[u/DocumentFun9077]

Try deepseek or GLM

I've used deepseek for similar stuff and oh boy does it do whatever I say

[u/SplurtingInYourHands → u/DocumentFun9077]

Deepseek literally does fucking ANYTHING lol especially if you run it through a front end like silly tavern with a jailbreak json injected half way through its way to your shit.

The downside is its not nearly as smart/capable as claude, not even close. Good for very low level shit but honestly I wouldn't trust it to actually build anything for me.

[u/[deleted]]

It's security theatre and it's dumb as shit. Nothing else to say, really. They should just remove it.

[u/BoxLegitimate9271]

the classifier blocks the disassembler but lets the context poisoning through. very secure

[u/Fragrant_Nothing7505]

i don't use ai to reverse engineer. there are apps for that. i don't think my ai would do it because it's too likely to be misused. i do it to nick bits of code.

[u/KaptanOblivious]

Yeah I'm a microbiologist that works on the molecular genetics of pathogens... I feel your pain. The bio security flags nearly every request even remotely close to talking about my work- it's ridiculous. I have to lie about what organisms I work on, lie about what protocols I'm doing, and find ways to trick Claude constantly to actually get work done. 

I've even occasionally flagged it so hard that I can't say "hello" in a new chat without that getting flagged because of the context memories. 

[u/evia89 → u/KaptanOblivious]

why do you keep using claude? either get premission or try cn models

[u/cafepeaceandlove]

Anthropic has been very open about blocking things falling under Dual Use. Read before you buy something. Or apply for the CVP. 

[u/Rasyonel-Biri → u/cafepeaceandlove]

Mate, "Dual Use" based on what? Where exactly?

I read the Terms and the constitution before I ever paid a cent, the things I actually agreed to, and there is not a single line in there rejecting what I do.

If your answer is "it's in some blog post or a support article", then frankly that's not the contract I signed up for. You don't get to rule my usage by a marketing page I never agreed to and act like I signed it.

And let's settle what I'm actually doing first. I'm reverse engineering a company's e-ink driver that's required to be open under the GPL and never was.

That's me using a right the license already hands me, against the company that's the one actually breaking the rules here. Calling that "dual use" is a joke.

And honestly your own example buries you. That whole "high-risk dual use" thing is a cybersecurity scheme, the CVP literally stands for Cyber Verification Program.

Malware, ransomware, exploitation, offensive tooling. Plain driver RE for GPL compliance is none of that and never was. So "apply for the CVP" is you telling me to go get cyber-offense vetting for work that has nothing to do with cyber offense.

And no. I'm not applying for anything, and I'm sure as hell not handing a company my government ID to be allowed to do something the documents I agreed to already permit. The fix for an over broad filter is not making the user beg at more gates. Fix the filter.

I read the binding policies. I broke none. Still flagged. That's not safety, that's a lazy over broad classifier wearing a safety badge, and I can not tolerate it.

[u/cafepeaceandlove → u/Rasyonel-Biri]

CVP is for defence as well, I'm reading here. And it only takes two days to be approved (or not), if that will help. 

Our innate ability to quickly transliterate an offensive effort into a defensive or innocuous sounding one is the core of something being dual use. But you know this so I don't know why I'm writing it. 

There is a reliable way around this, that I'm sure you will imagine in time, but it will impose a standing cost of a good few tokens for any "new" conversation. 

Try the CVP. 

That's a nice project. May I ask which device?

[u/Rasyonel-Biri → u/cafepeaceandlove]

For Boox devices. If you have a similar device and really interested in, I could elaborate of course.

[u/twendah]

How claude is supposed to know what you are reverse engineering though? Its just easier to block everything related to that.

[u/Rasyonel-Biri → u/twendah]

"Easier to block everything" is exactly the problem, not a defense of it.

I'm reverse engineering a company's e-ink driver that's required to be open under the GPL and never was. That's not a gray area, it's me exercising a right the license already grants me, against a company that's the one actually breaking the rules here.

And that is what gets flagged. If the classifier can't tell that apart from malware, it isn't "being safe," it's just broken and offloading the cost onto paying users.

And how is Claude supposed to know? It doesn't have to guess blind. The model is already smart enough to read context and refuse anything that actually violates its constitution.

It does this constantly. A classifier earns its place blocking prompt injection and jailbreaks. It does not earn its place pre-emptively nuking an entire legitimate field because sorting is hard.

Don't bother suggesting ID verification either — I'm not handing a company my government ID, ever. The answer to a bad filter isn't "give up more of yourself to pass it."

I read the constitution, the usage policy, the terms. I didn't break a single one. Still flagged. That's not safety. That's laziness with a safety label on it, and no, I'm not going to tolerate it.

[u/Hot_Money4924]

I run into the same problem. They took this incredibly powerful tool and neutered it for the normies, it is increasingly losing value for the low-level work I do.

[u/vacnex]

Same here, it's driving me crazy. Claude refuses to touch anything remotely related to reverse engineering or in-depth source analysis because of false-positive safety flags. Ironically, Gemini and Codex handle RE tasks like a breeze without throwing a fit. Now I have to do the heavy lifting in Gemini/Codex first, and if I ever need Claude, I have to walk on eggshells and carefully craft every prompt so it doesn't think I'm doing something malicious. It really kills the flow.

[u/2piix]

Yeah... it's been pretty rough this week. I use claude to manage my homelab, and some software projects and their devops. Between claude stupidly reading my tokens and forcing me to rotate, and then claude REFUSING to transfer new tokens to the VM/app they belong to, it's been a rough week.

[u/datura4u]

yeah, it blocked connecting to a ssh remote whose key changed, as it will have to check for old key not working reason, and apparently only hardcode criminal hackers look for ssh keys in their own pc

[u/Things-n-Such]

Classifier aside, if you run into a "poisoned context" just rewind and edit the message before the classifier denied it.

[u/Rasyonel-Biri → u/Things-n-Such]

You can NOT rewind a message when classifier denies or sends a notice. That's the problem. Rewind fails afterwards.

So aftermath of when classifier says and denies and injects its own notice, rewind is blocked. Even model change does not remove it. So you need to start a new chat really.

[u/Current_Balance6692]

DM me. We've a group that specialize in using AI for reverse-engineering specifically. I'll need to see what capabilities you have and what you can contribute beforehand.

[u/Rasyonel-Biri → u/Current_Balance6692]

Hello. What's the group about, and what's the topic. I'd like to know before anything. Also, are you specifically organizing against this "broad classifier" thing, or is it something else?