mirashii
Joined 14 years ago
Karma
2,758
Submissions
580
Member since
May 6
email: me at rdeaton dot space
View on Hacker NewsRecent submissions
Comment · 13 hours ago
If they tried to stop terrorists from making biological weapons in the same manner, the headlines would call that useless and ineffective because you're trying to stop already bad actors with something ineffective and trivially bypassed. This is no different, and shouldn't be treated any differently.
Comment · 15 hours ago
They really didn’t though. They put it in a client side modification to the system prompt. You can just rip it out with a proxy or a small local modification to your client, which Claude will be happy to do for you. They took a token step so that people would write these headlines in the hope it would stave off more negative attention in the video game world without actually doing anything meaningful.
Comment · 1 day ago
This is a common sentiment, but the security story isn’t so clear cut as that. Encrypted at rest really just means that if you yank the disk out of the server, an adversary can’t read it. But if it’s a system that is online serving a database and you gain access to the application reading from the database, encryption at rest doesn’t save you. It’s obvious the application server must be able to read the decrypted data. If an adversary breaches the application, they get the data.
Comment · 1 day ago
I’d say it’s more correct that Anthropic publishes the Open VSX version, and Cursor mirrors it in their own repository, labeling it as being published in their mirror by Anthropic even though it is not.
Comment · 1 day ago
Cursor didn’t always use Open VSX, it changed in late 2025. https://forum.cursor.com/t/extension-marketplace-changes-tra...
Also worth noting that it doesn’t use Open VSX directly but uses a cursor hosted mirror at https://marketplace.cursorapi.com/open-vsx-mirror
Comment · 2 days ago
You’re right, I read too quickly.
Comment · 2 days ago
There are regularly gaps in the claude code versions, e.g. if you go back a page, there's no 2.1.297, 2.1.298.
Edit: the below was incorrect, left for posterity, the release can be deleted and then the tag as well.
Also, all their tags are immutable, and so can't just be deleted to hide things: https://docs.github.com/en/code-security/concepts/supply-cha...
Comment · 2 days ago
Given they mentioned taking down and rebuilding the marketplace registry in that post, it seems equally likely that Cursor’s infrastructure was the source of the intrusion and a folks are jumping the gun on attribution.
Edit: I was correct. https://news.ycombinator.com/item?id=50304129
Comment · 2 days ago
It is, thus the links being to individual wallets.
Comment · 2 days ago
The primary reserve currency does it all the time. https://ofacblockedfundslawyers.com/us-sanctions-freeze-doll...
Comment · 4 days ago
The thing that actually makes it harder in Python is threading, because it breaks all ability to reason locally about what might happen and optimize. In Python you have to assume that another thread may do these things at any point mid-execution.
Comment · 4 days ago
There’s an #internals-and-peps channel in the Python discord where some folks hang out.
Comment · 6 days ago
It does not permit taking over pointers and doing a plain old RCE, sure, but it still does permit a variety of optimizations that could break the logic of your program in surprising ways.
Here are two examples of where it's clear that the UB from the underlying C is still present and the optimization passes are still able to do things that wouldn't be possible without UB, like falling through functions and deleting safety checks inserted by the Fil-C runtime:
https://news.ycombinator.com/item?id=49677463 https://news.ycombinator.com/item?id=49681273
I'm not really convinced you can take LLVM and just flip a few poison bits off and remove a couple optimization passes and know that UB isn't going to explode in your face.
Comment · 7 days ago
Fil-C does still have UB. Signed-overflow, for instance, is still UB in Fil-C, and can still lead to things like the optimizer removing checks in the presence of UB.
Comment · 7 days ago
Imperva claims to have demonstrated it, but didn't publish it openly (and their article screams AI slop, so take that for what you will).
https://www.imperva.com/blog/node2shell-from-brotli-data-to-...
There's also a public POC here, though with the caveat that they demonstrated it only on builds with weaker configurations. https://github.com/dimasma0305/CVE-2026-111497-POC
All that said, we haven't heard the major cloud providers or security labs saying they've seen exploitation in the wild yet.