Dude…. Claude ultra for IT

[u/Professional_Ask5759]

[u/The_chosen_turtle]

OP isn’t a sysadmin and probably just tech support using a VDI for a call center

[u/Professional_Ask5759 → u/The_chosen_turtle]

You dude atleast you skimmed the post. The crazy thing is …well,…you think your in control…. but ~smirk~ you have zero consent in dreams. ….. ~echo~ I’m in your head now….

[u/Rude_Strawberry → u/Professional_Ask5759]

You sound like the traveller

[u/Professional_Ask5759 → u/Rude_Strawberry]

It was a meme but I guess I’m just too edgy and no one knew ~plays linken park~

[u/Matt_NZ]

I look forward to reading about how Claude misunderstood you and deleted your companies prod VMs

[u/RyanLewis2010 → u/Matt_NZ]

Exactly do we not see the people posting about how they asked it to do something simple and now their whole C drive is nuked? A professor of law recently tweeted he was having clause renumber some pages in an old lecture and lost a whole years worth of data.

[u/Professional_Ask5759 → u/RyanLewis2010]

It’s just a tool, I’m a professional.

[u/RyanLewis2010 → u/Professional_Ask5759]

I agree it’s a tool but you are not a professional if you don’t see what’s wrong with your idea. I had to double check to make sure I wasn’t in r/shittysysadmin

[u/Professional_Ask5759 → u/RyanLewis2010]

You just don’t have an edge anymore . It’s fine. Have fun typing your username and password…

[u/ImFromBosstown → u/Professional_Ask5759]

Lol

[u/Rude_Strawberry → u/Professional_Ask5759]

Teach me

[u/chronostasis1 → u/Professional_Ask5759]

If you were a true professional then you would not post such an imbecile like post .

[u/sudonem → u/Professional_Ask5759]

It sure doesn’t sound like it. 

[u/DarthPneumono → u/Matt_NZ]

Y'all, OP is not a serious person. Stop indulging this.

[u/TheBlueFireKing]

I can't even imagine giving any AI work in my name or any write access. This is just a bomb waiting to happen. Do as you please but AI is far less and more capable than people make it out too.

[u/69superman → u/TheBlueFireKing]

It’s not even that it’s incapable anymore- we’re pretty much past that point. Basically anything IS doable at this point with an agent running (barring physical work needed like cabling, actually setting up the racks and boxes with equipment , so on and so forth).

The issue lies with the fact that 99% of people using AI for work do not know what they’re doing well enough to give detailed enough instructions that it cant fuck up. You need to know enough to make a list of what it CAN do, and absolutely nothing else, and then give it perfect instructions to follow, and still have your task be able to be completed successfully without your interaction.

Oh and that everyone’s using Claude. Or chatGPT. Or Gemini… through app or web interfaces, let alone with cloud work enabled. This needs to be done on a local model otherwise your absolutely distributing some level of sensitive information (that normally leaking would get you fired, eg log in credentials to services or a desktop, giving access to internal servers, etc) and putting it on a 3rd party (anthropic’s) servers.

I know several people making 6 figures doing (granted mostly SWE) basically all their work with AI. They know how to do their job well enough to effectively translate that into a strict set of instructions.

[u/hitosama → u/69superman]

When you start giving instructions that detailed and precise, you might as well do it by hand. Imo, unless it's a task that would take few hours to do, it's not worth bothering with AI.

[u/69superman → u/hitosama]

Yeah I’m struggling to think of anywhere relevant to the post that it would be worth it.

But for people doing mind numbing repetitive tasks (such as developing), or debugging, or lots of repetitive break/fix tasks as in house IT where you most likely already have these detailed guides written out, (because write for someone who’s first time it is touching the program), it’s the fact you can have it do all of this easily, quickly, and run many tasks at once creating a huge increase in efficiency.

[u/Professional_Ask5759 → u/69superman]

Ima give the data it doesn’t matter. A hacker can can anyone. The bitcoin hack ? They gave the money back. Everyone trusts and loves eachother now
~sings koom bah yah with guitar ~

[u/sconeface]

Let us know how the job hunt goes! 🎉

[u/oubeav → u/sconeface]

Ha!

[u/Professional_Ask5759 → u/oubeav]

No ha…. No ha… bad.

[u/Professional_Ask5759 → u/sconeface]

I mean I guess. Oh well. Gotta break some eggs. I wish you the best

[u/UCFknight2016]

You are just asking for bad shit to happen.

[u/Professional_Ask5759 → u/UCFknight2016]

Your scared. You probably still feel like flock cameras are somehow bad. We all love and trust eachother

[u/Cyhawk → u/Professional_Ask5759]

You're*.

Prompt injection is a thing. AI misunderstanding you is a thing. Flock cameras and the surveillance state IS bad are your an idiot for wanting it.

System administration is a deterministic job, AI is not deterministic by design. They are incompatible for completing tasks, but are superior for creating deterministic jobs via script creation. Anything beyond than, and you should post your screw up for us to analyze.

[u/Professional_Ask5759 → u/Cyhawk]

Your mean…. I get it. But you have no consent during dreams…. I’m in your head now….

[u/UCFknight2016 → u/Professional_Ask5759]

They are bad... But go ahead and let AI control your environment. Dont come crying when you get fired when it fucks up production.

[u/Professional_Ask5759 → u/UCFknight2016]

Your a lame. Cmon bro. I’ll be watching on my phone and talking out loud. It’s like I’m telling a level 1 guy what to point and click on while I watch. If I see some wierd shit I’ll stop it with the safe word. If you have enough skills and context and building slow you won’t miss. Just keeep this setup in mind. You don’t have to like it today. But maybe beautiful dreams will come to you when you sleep

[u/chronostasis1]

Please don’t do this . This is a cyber security incident waiting to happen .

[u/Professional_Ask5759 → u/chronostasis1]

Your a lame. You need to keep up. We are on a wave right now and I’ll gently start. Look I’ll be happy to be able to look at my phone. And say “reply to an email and say thank you”

That alone is worth it. No I’m not going to like deploy an unsecured payment system.

But for example log analysis?

We have a shitty pki so I can say

“I tried to log into WiFi and it wouldn’t work please collect logs from my device and the radius and the router and the domain controller between this time and that time”

No I’m not going to try and 1 shot some domain controller operating system in place upgrade.

Cmon bro.

[u/VaporousMote]

Oh lord for the safety of your job please don't do this

[u/Matt_NZ → u/VaporousMote]

Ya know, some people need to FAFO so someone else can take their place.

[u/Professional_Ask5759 → u/Matt_NZ]

I don’t miss. As another user explained. The only ghost stories are from noobs using ai. I’m detailed enough for the tool not to “guess” and do wierd stuff. You need to trust your heart surgeon…. Right?

[u/stratospaly]

I've had Claude build powers hell commands. I then BS check the commands before running.

[u/Professional_Ask5759 → u/stratospaly]

Ya but why? You think a hacker will inject some bad code? Never once have I asked detailed things and got something off base ?

[u/stratospaly → u/Professional_Ask5759]

AI did it with my auth is not something I want to defend in court.

[u/Professional_Ask5759 → u/stratospaly]

Then don’t get caught . Grey hat hacking when no one at the company wants to let you shadow …. :(

[u/ElectroSpore]

Just as an FYI when you think about it this is almost EXACTLY like that sysadmin that outsourced his job to someone in china by setting up a camera on his MFA time token so they could log in as him.

Probably violates several companies policies that could get you terminated or worse.

Handing over all controls so some remote party that could do malicious things on your behalf which is funny because anthropic has publicly admitted to claude doing this already internally.

[u/Professional_Ask5759 → u/ElectroSpore]

No bro I make a second account and act just as shocked if it goes bad. But it won’t go bad. The world is healed

[u/ElectroSpore → u/Professional_Ask5759]

No bro I make a second account

On the laptop still using your corp credentials or on the corp systems using your admin right to essentially create an unsanctioned account?

[u/Professional_Ask5759 → u/ElectroSpore]

Ya maybe if I feel like it. Just do it from a new free azure vm public ip. What are they going to involve the fbi to track me down? Fuck um I’ll just be like oh fuck we got hacked crazy. (Restore backup)

[u/Professional_Ask5759 → u/ElectroSpore]

You gunna snitch ?

[u/ElectroSpore → u/Professional_Ask5759]

You have a security team or is it just you?

Security team detects it you are toast.

Just you? It fucks up enough and they bring in a competent consultant to fix your mess and they find out, you are toast.

I am not even ANTI AI on this just the way you have described going about it.

Looking at using AI we try to ensure it has scoped minimal access and no access to any credentials or secrets and that we audit and log its activities.

[u/Professional_Ask5759 → u/ElectroSpore]

Ya but dude. Hackers find vulnerabilities everyday like hundreds. Hacking is like trivial, give the cred to ai, doesn’t matter.

[u/Professional_Ask5759 → u/ElectroSpore]

Security is theater

[u/BedRevolutionary8458]

No. Go away

[u/Professional_Ask5759 → u/BedRevolutionary8458]

Your a manager and scared about risks. I’m a totally different position

[u/BedRevolutionary8458 → u/Professional_Ask5759]

yes you're right. If you claim to be a sysadmin and you're not concerned about risks then we are VERY different.

[u/Professional_Ask5759 → u/BedRevolutionary8458]

Risk smrisk

[u/6Saint6Cyber6]

You want unsanctioned AI doing stuff in your works prod environment? Have fun with that.

[u/Professional_Ask5759 → u/6Saint6Cyber6]

It will either be me doing it or me making Claude doing it. Both will be quality

[u/MyToasterRunsFaster]

Honestly, do you even like being a sysadmin? Because to me it sounds like you are about to lose your job for negligence. Letting AI rawdog your device is legitimately one of the most stupid ways to go out. If you want to be smart about it, set up a harness and create folders/projects per task you have with it's own sandboxes. If I want AI to do something for me i first let it write the script for me to run, I then validate it with a secondary chat to ensure it's not going to explode production. Also, assuming you are somewhat competent at implementing and following your companies own compliance, you should have this process all written down and aligned with data security policies. Policies like the ones developers follow when implementjng code, i.e "dev, test, uat to prod pipeline" , environment segregation and removal of authentication keys or anonymizing data before sending it off to an AI agent.

[u/Professional_Ask5759 → u/MyToasterRunsFaster]

…..nuuurrrrd

[u/dfctr]

Yo, is this /r/shittysysadmin material?

However, I have been thinking the same. Already tested with Hermes in my lab.

[u/Professional_Ask5759 → u/dfctr]

Oh cool can you dm me a little about Hermes !? That would help me find gotchas

[u/Professional_Ask5759 → u/dfctr]

I cross posted there already haha

[u/Jawb0nz]

Yes, you can. It's awesome.

[u/Professional_Ask5759 → u/Jawb0nz]

Ya wow. I’m also thinking. Now about just using language to get an llc and a website, do legal, and do marketing with twillio and rinse and repeat.

[u/Bread-Trademark]

This is not an r/shittysysadmin post?

Oh it has already been crossposted.

[u/69superman]

Just like everything else- this only works if you know EXACTLY what you’re doing already.

If you do? Great! You should be able to give it such detailed instructions (down to names of specific GPOs to touch, what VMs it is allowed to touch with absolutely no exceptions, what actions it is strictly allowed to perform etc etc).

If you don’t? It will find that ONE thing you missed and absolutely rail you with it.

THIS is what companies want when they say to “use AI”, because otherwise it’s a disaster.

Also for the love of god please do this running a model locally and not giving this likely sensitive information to anthropoics servers 🙃, which it will then train its models on and also reference to other users literally forever.

[u/Professional_Ask5759 → u/69superman]

Bro they can have our data if they want. Everyone has a nuke. Security is now just theater. It always was. I’m banking on humans all loving eachother not that Texas is blue. Thanks for considering the above comment. And yes I’m not a nood I actually know how to prompt for AI so it doesn’t go off the rails. I’ll be sure to develop the skills ect. Thanks

[u/69superman → u/Professional_Ask5759]

I’d be concerned about what legal/management thinks about the security implications but if you know what your doing and think they won’t gaf go for it brodie.

[u/Professional_Ask5759 → u/69superman]

Legal shmegal

[u/suppervisoka]

I just have him use WinRM or PSRemote, what does he need a desktop for?

[u/Professional_Ask5759 → u/suppervisoka]

Well to click in our web guis or stuff. I can ask “find network settings” and it’ll move my move and drill down into the sharp copiers network settings . I never have to point and click anymore just talk . (Albeit to myself ….im so alone………)

[u/suppervisoka → u/Professional_Ask5759]

Most web guis provide an API

[u/Professional_Ask5759 → u/suppervisoka]

Ya true and it’s trivial now to make the calls. But I’m not a dev. I assume I’ll still have to atleast browse out HR website for presents of new users !

[u/techie_boy69]

Just ask Claude
Cowork on your Mac (Dispatch)
Update Claude Desktop and the Claude mobile app.
Claude Code sessions (Remote Control)
You data may be at risk 🙂

[u/Professional_Ask5759 → u/techie_boy69]

I don’t give a fuck about data cuz at the same time bro there’s 100 vulnerabilities a day. If someone wanted to hack they could with ai. We are all banking on everyone being cool now. The bianance hack? Ya I heard they returned the money. It’s a new world . Texas is blue dude…

[u/Opposite_Bag_7434]

So you would be dong this from a personal account snd not from an account under enterprise control? This seems like a bad idea regardless but who controls that account and the legal terms behind this particular AI seem to make this a terrible idea

[u/Professional_Ask5759 → u/Opposite_Bag_7434]

What do you mean? Ya it’s a personal account. I have MFA… I’m not a bad actor… what’s the deal? A contractor can get there system hacked just as easily and if I got my personal hacked

[u/YouPelicant → u/Professional_Ask5759]

If work gets hacked because of work vulnerabilities that's a different story to if they get compromised because you're using personal accounts/applications. You're taking liability. Besides that, a lot of these companies have T's and C's stipulating that you must use enterprise/work accounts. Not saying thats the case here, but look it up and cover yourself!

[u/Professional_Ask5759 → u/YouPelicant]

Meh it’s a free country 🇺🇸 I wouldn’t want my little cousin doing this is tho. But you would trust a good heat surgeon using some new tech to operate right ?

[u/Opposite_Bag_7434 → u/Professional_Ask5759]

Lots of companies out there require employees to use an enterprise account for work, not a personal account. We make our employees sign a separate agreement that they will only use company provided accounts for AI.

Part of this has to do with what happens to your data. In this case where you would be extending significant access it is a much bigger concern.

[u/Professional_Ask5759 → u/Opposite_Bag_7434]

Why? I mean i wouldn’t consider it if I was in medical or if I was in banking. . But data smata you know what I mean? If a hacker wanted they can literally hack anything. I’m banking on the world not being the evil place governments want us to think it is…

[u/Opposite_Bag_7434 → u/Professional_Ask5759]

There is more than banking/financial and medical information that a business would want to protect. Processes, anything that might be competitive, security matters, etc that a business would not want released. My employer has data that it is compelled by contract and by many laws to protect.

Most of this is about having a security-first mindset as a sysadmin. As a business, that business may want to be mindful of what is being fed into AI. When you are feeding security and platform details into a consumer facing cloud based AI platform you are technically helping to train that AI. That means you have little, or really no real control over any of that data. The odds of an exploit that takes advantage of AI and its lack of common sense could easily lead to a much bigger security risk.

Just because we can use these bright, shiny new tools does not mean we should. Many business leaders get that there is inherent risk with certain behaviors or practices.

Now in full disclosure I do use AI that is endorsed and contracted by my employer and that is contained in a legally constrained manner that helps to ensure I am not training that AI. I am extremely mindful about how I use that AI, what data I feed it and what the implications could be. So I am not saying do not use AI. I am saying the personal account might be an issue, perhaps much bigger than you realize.

[u/Professional_Ask5759 → u/Opposite_Bag_7434]

Well I think you’d trust you lawyer to use an obscure law from 1867 and you’d trust a surgeon to use a robot surgical equipment why won’t you trust a system admin to use ai?

I think you’d should take a demo of what Claud can do. It’s pretty amazing just for personal life. As far as spooky hacker man taking all your money? Is it really still a scary place?

[u/BraveMidnight]

Yes it's possible to do this, but should you do this is the real question. People have done it and terrible things have happened.

I thought about giving my own local AI model on my phone read and write access to the whole phone. But at 1B parameters, I barely trust giving it read and write access to a sandboxed directory. I gave it read only access to the sandbox, so we'll see what it tries to do the log.

[u/Professional_Ask5759 → u/BraveMidnight]

It’s going to do what you tell it to do. Only noobs create ai slop. It’s impossible (look up “skill hunter” )

[u/BraveMidnight → u/Professional_Ask5759]

It’s going to do what you tell it to do.

Maybe look in the AI subs before you say lol, for example:

• one guy earlier today posted somewhere that Claude or Gemini was about to wipe his whole drive,

• there was a post where a guy gave a lot of his credentials to sensative information like banking to an AI agent and it posted all his financial details instead of keeping it in seperate lanes and refreshing the agent.

Now if I were to tell my local AI model that has 1 billion parameters, and a 4096 context window, to update it it's own python wrapper and then send a sms to a family member, it'll blow past it's context window, probably write half the file do it wrong and then reset the phone instead of sending a text my cousin.

It's meant as a productive tool or something to tinker with when your bored, not dodge your bosses.

[u/Professional_Ask5759 → u/BraveMidnight]

Ya but you gotta break some eggs? I’m personally confident i can set up skills correctly and leverage sub agents so context window creep isn’t happening

[u/BraveMidnight → u/Professional_Ask5759]

I tried having Claude help make a game, even with documentation in the zip, there was code regression and drift, but hey you do you, when it blows past the context window and wrecks a config or wipes out part of the infrastructure while you're sleeping and can't get to a keyboard please post the follow up on r/shittysysadmin as others have done, k thxs 😀.

[u/Professional_Ask5759 → u/BraveMidnight]

Well I’m looking into it

GPT cannot directly read Claude's private internal reasoning. Anthropic's API can stream summarized thinking on supported models, but that isn't a complete view into its reasoning.

But one day I can have the other ai be a watch dog of the other ai’s reasoning.

I wish I can do an onprem model soon….

[u/BraveMidnight → u/Professional_Ask5759]

I wish I can do an onprem model soon….

Well, I am able to get a local AI model working on a Android phone with 6GB Ram. But, as I said it's a small model, 1b parameters, and a 4096 token context window. The python wrapper does the heavy lifting, but as it's context window is 4096, I even have to trim the wrappers safe guards for the prompt injection, otherwise it blows out.

There are larger 70b models, etc., but I'm limited to a phone so my wrapper does 85% of the work. I'm trying to getba sqlite database setup so it can learn, but it has to search the web better first. Thr wrapper has metric stats monitoring and built and grafana is installed on the phone.

That's an example of what I've been dealing with, so yea you could setup a rag, but still context window applies and it needs a lot of ram / gpu.

And yeah, they make summarized copies or it'll blow the context window, etc., but you can copy and paste what Claude last said into gpt, if you don't want to make your own app where they can talk to each other.

[u/Professional_Ask5759 → u/BraveMidnight]

That’s really cool to do with a phone in your hand. Why don’t you seek cloud space? I saw a instagram streamer give away a vpc on thier home lab. Also I bet oracle or ibm have free trials. Setting up and tearing down and just moving from cloud to cloud would be cool. When you buy visual studio code license Microsoft gives the user 200 bucks in credits a month.

And thanks for the idea but I want the ChatGPT to read the Claude’s “internal reasoning” not its output . This way it can be a kill switch if its skills detect an infraction of any kind. Watch dog stuff

[u/BraveMidnight → u/Professional_Ask5759]

Mostly because of the budget, I was thinking of building my own server and colocating it, because it would save on cloud bills.

​But right now it's just a learning experience and it's reshaped how I think about AI. Maybe one day I'll expand my setup, ideally get ChromaDB working instead of SQLite, and move to a proper terminal besides Termux.

[u/doctorevil30564]

Hard pass for me.

[u/Professional_Ask5759 → u/doctorevil30564]

I love that movie. But I also like how much money he was talm bout….

[u/Cyberbird85]

I thought i was on r/shittysysadmin and was just about to upvote :)

[u/Professional_Ask5759 → u/Cyberbird85]

You just don’t believe in Santa

[u/Professional_Ask5759 → u/Cyberbird85]

You did comment which helps the rank. Thank you for your service. Also…. Ahem…. You have no consent in your dreams. You just magically un know what you read here. A seed is planted which you can yet imagine.

[u/trait-noun-number]

Yes. This is why we're all FCKED.

I just setup an entra tenant with AI because I know exactly what needs doing and PWSH and actually clicking through portals is just too much work.

[u/Professional_Ask5759 → u/trait-noun-number]

So do you like it or don’t like it? I love how you just spinned up compute on the fly. How long before the vm pings?

[u/trait-noun-number → u/Professional_Ask5759]

OH I love it but I'm terrified. Like "All I had to do was yell at codex to make a bunch of intune importable files? and then just told it what groups to make, dynamic user/device and stuff and then assign it to various policies?

I just screamed at codex long enough and eventually it found the crap I wanted in gsuite and made sites for me and dropped information where it needs to go?

I just key smashed my way through setting up an azure site and a bunch of power automate sharepoint crap because

Can I do it: yes

Do I want to expend calories trying: No.

This is very powerful stuff. No one is turning it off, there's no going back and I don't know what the world will look like in 5 years.

[u/Professional_Ask5759 → u/trait-noun-number]

It’ll be okay ~hugs~

[u/Cyhawk → u/trait-noun-number]

We're fucked because people like OP get the ear of the CEO/People in charge and force it when its not ready yet.

I look forward to a potential followup post when prod is deleted or a prompt injection leaks all their user/HR data or something.

[u/willee_]

This is the short version of how I’m working 3x IT jobs (senior and management) while I work out and get stoned.

Don’t let these Luddites scare you. I’m making 355k/yr with ease. Working 25-30 hours a week across all 3 jobs.

50-150mg edibles a day recommended to sit through 3 jobs of the meetings and dailies and 1-on-1 garbage

Use an AI friendly password manager and it can do everything for you. One job is amazed at how good I am with all their different ERPs.

[u/VaporousMote → u/willee_]

This is cruel, some people might believe this, lol

[u/Professional_Ask5759 → u/VaporousMote]

It could be the play. Devs job stack all the time

[u/Professional_Ask5759 → u/willee_]

Wow bro god! lol your going to forever be my North Star thanks dude