Ooooooh my
"...Their Claude Code extension on Visual Studio Code and Cursor has malware in it, which creates a remote access Trojan to desktops. ..."
0 Boosts
0 Likes
I will keep harping on this for as long as I live: DO NOT LET THE LLM TOUCH THE SYSTEM, DIRECTLY, FOR ANY REASON.
This assumes you're using one anyway. If you are, and you use it exclusively through the web browser, you force it to do everything inside of its own sandbox and not on your machine. That's not to suggest that it's physically impossible for it to ever do anything bad because of this limitation; it's just that it makes it a lot harder for to get something malicious onto your machine if it's literally trying to and, again, if it just hoses everything immediately then it does so only inside of its own sandbox, so it doesn't matter. I will never "vibe code" insofar as to allow the robot to have access to the same copy of the codebase as I have, or my machine, or my editor or my compiler. If you've already decided that this is how you're gonna do this, then just make the robot do its job without ever having a compiler itself, and then compile it yourself. It's still not perfectly safe, but at least it's safER.
LOL have you seen what Claude demands when you decide to try to use it?
@ai6yr
Been a busy night again for a lot of folks.
@ai6yr
You know, it's about once a day now that you post a story that makes me ask myself, "oh, is _this_ the way that AI is going to kill us all?"
Carry on, it's instructive.