desipenguin

> several poor security mistakes

I heard it from someone as well, but I cannot find the link or specific details.

Can someone summarise what are the security issues related to using opencode?

Do these issues still exist, especially in V2 ?

Genuine question: Does the Agent harness matter ? I mean why use Claude CLI ?

(As I mentioned elsewhere) I use oh-my-pi (and opencode, and toad) but use (client paid) Opus 5 with these harnesses.

All three of these understand AGENTS.md

symlink CLAUDE.md to AGENTS.md

You can change language from the top right-most dropdown, and select English

I did a similar workshop between Feb-April (1 hour zoom call on Wednesday, 3 hour hands-on in person every week)

Most of the participants has Windows laptop. (Except one with Mac)

We had suggested Linux on WSL2 and VSCode. (`uv` for python package management)

But realized that we were spending a LOT of time fighting the tools/combination. WSL2 + Windows filesystem + uv did not work well together.

For person with macOS - it was smooth sailing

If I do another batch, we'll use native `pip` and python (not uv) and I think then we won't need WSL2

Bots/LLMs don't care if you ban and ridicule them in public.

I have faced "O365 required re-authentication every 24h or so" in my previous job.

It was irritating.

I just assumed it was "IT policy" and accepted the inconvinience.

I am assuming that the second password is like decryption key. I have saved the second password as "mailbox password"

The way I interpreted is that first password is for the account, so verify I am who I say I am. But since the emails are encrypted, browser can't show my messages in human-readable form. Second/mailbox password decrypts it and shows the emails in human readable format.

This is just a guess.

I would love to hear about second password from other/more knowlegeable folks.

If bad keys are the only problem with X1, why not buy external/wireless keyboard ?

Intern I work with, got something working, but was not saved anywhere. No git No email to others in the project (That is how they work)

He complained to me that he "could not find it in ChatGPT history as well"

I think @alexmolas was lucky

Agree 100% I tried perplexity to "search" My use case was similar to one described above.

I know what I'm looking for. I just need exact URL.

Perplexity miserably fails at this.