shitter

GPT did the Hugging Face hack, not you (human engineers at OpenAI) :^)

I've never heard of "Google it". I've only ever said "Input it to a web search engine".

.onion

? Doesn’t the code exec happen upon merely launching Cursor against a repository, without giving an agent any tasks? That’s clearly an issue at the Cursor application level, not some inevitable risk caused by the non-deterministic nature of LLMs. You can’t use the latter fact to excuse the former mistake

Not to mention that Cursor has an agent permissions model that this presumably sidesteps!

I would file a CVE for any program that places untrusted content into PATH and invokes non-fully qualified executable names - not for the shell.

Yeah, but you can easily mitigate it by searching for the real git in known system locations and using whatever you find there (or allowing the user to configure the path). I believe that's how VSCode does it

Since there are no approval dialogs, it sounds like that doesn't even come into play here. That is the "gate" (to use the AI parlance) that Microsoft places on code execution in workspaces, though, and I would expect Cursor to at minimum fix this to only execute git.exe in trusted workspaces.

The user's code folder? You mean the code I frequently pull from untrusted sources, unlike my .bashrc? Opening a GitHub project for review should not mean arbitrary code execution.

Of course, that ship has long sailed, for all major IDEs. Heck, VSCode SSH and devcontainer remotes allow RCE by design.

And what'll the prompt say? "Do you want to run git.exe?"? I'll probably assume Cursor needs to run git but permissions got messed up somewhere and click right through that.

I haven't used Windows in a while so pardon if I'm missing something.

Temporary in the sense that it's a stop or two away from getting laid off.

This comment betrays a misunderstanding of history and of what fascism is and doesn't even engage with the article's points. A totalitarian fascist state does not come into being all at once; it emerges in steps that tend towards that outcome, steps which the article discusses in detail. Furthermore, that nascent fascism can be defeated through electoral means does not preclude it from being fascism.

Call me a relic of a bygone era of seriousness and decency, but I don't think the White House should be in the business of mocking individuals online, either. But I know we're well past that point.

Why not? If it's high-performance, it's fine.

It shows no such thing. The officer got out of the way and was fine afterwards in both videos. This is a man who was angry and possibly traumatized by a prior incident involving a car. He should not have been allowed to carry a weapon