Claude, how do you do dark patternz? (Let me grab some of the headings from the article)
==quote==
- Forced bundling across trust boundaries.
- Invisible default, no opt-in.
- More difficult to remove than install.
- Pre-authorisation of software the user has not installed.
- Scope inflation through generic naming.
- Registration into software the user has not installed.
- Registration into browsers Anthropic publicly says it does not support.
- Fixed target list with no user visibility.
- Automatic re-install on every run.
- Retroactive survival of user consent.
- Code signed, notarised, and shipped.
Security threats this creates:
Latent trigger supply chain exposure.
Prompt injection in the bridged extension.
Browser trust model inversion.
No auditability.
Future scope creep.
Privacy threats this creates:
Authenticated session exposure.
Rendered DOM access.
Form filling.
Cross profile correlation.
Invalid consent.
Is it spyware?
The honest description of what is on my machine is this: pre-installed spyware capability, silently placed, dormant, waiting for activation. The moment a paired extension lands, whether the user installs it, an enterprise policy pushes it, an attacker plants it, or Anthropic’s own next update bundles it, the word “dormant” vanishes.
Anthropic will argue the binary is not currently doing anything harmful. That argument does not survive contact with the facts. The capability is installed. The trust relationship is established. The opt in was never requested. On the day the trigger arrives, none of that changes, except the binary starts running.
That argument also doesn’t save them legally - the mere placing of the binary on the device and the creation of the folders to store it is a direct breach of Article 5(3) of Directive 2002/58/EC and a multitude of computer trespass and misuse laws.
What Anthropic should have done:
==end quotes==
Go on, read the article in full. Put yourself in the shoes of a paid cyber warfare state actor, gleefully watching the world installing backdoors you can exploit at your whim and leisure. Put yourself in the shoes of a skript kiddie, just wanting to have a little play on the dark side and discovering this brand new playground full of willing victims. Put yourself in the shoes of a vendor salesperson, rubbing their hands with the joy of collecting comprehensive user activity when they install software to drive their new shiny toy that uses Matter for the obligatory phone home for first activation. Put yourself in the shoes of a malicious actor, releasing a new app on HACS for your convenient download…
The trap is set, ready to be sprung. You don’t even know it was planted, and how to exorcise it. You turn to AI for assistance…
Whatever could go wrong?