This is why when I use AI, I still download from the browser and drag and drop the outputted files like a caveman. Sure, it's slower, but it keeps my mental model more up to date and has less security risks. I can even...like read the thing before I run it rather than giving a LLM access to my shell directly. Also anecdotally, it seems more token efficient for those who care about that.

He says to follow his social, and he provides his handle, but there's no link, and I have no idea how to read it.

You guys open your editors?

This is a joke (neovim user here).

Just uninstalled all the vscode extensions. Dont need any of them anymore.

I think right now AI is helping the attackers more than it's helping the defenders.

That part is probably obvious.

But in the long term, I suspect this will get worse.

Attackers will still need to think critically to be a few steps ahead of the defenders.

But the defenders will increasingly outsource their thinking to AI as they are incentived if not outright forced to dumb themselves down into interchangeable cogs.

The extension has over 27 million installs, ouch

Let me guess, they vibe coded their vibe coding extension?

That's not official extension though? Misleading title

From https://doublepulsar.com/anthropic-hacked-to-deliver-remote-...

Notable customers who run Claude Code and Cursor on laptops include Binance, amongst thousands of others.

Did the Claude Code plugin hack cause the Binance theft? The timing seems like an incredible coincidence.