Is fancy code completion really worth it ?

Of credible AI horror stories I think this is about as bad as it gets !

https://www.tomshardware.com/tech-industry/cyber-security/researchers-uncover-critical-ai-ide-flaws-exposing-developers-to-data-theft-and-rce

I'm sticking with the "legacy" Keil IDE for C coding on ARM - it may be a little slower but at least I'm fairly sure that nothing gets into my code that I didn't put there !

Top Replies

balajivan1995 4 days ago in reply to cstanton +3

cstanton said: Remote code execution and data theft, my favourite combination! Technically, you don't even need AI for that. Installing extensions from VS code marketplace is enough. Threat Actors Keep…
cstanton 4 days ago +1

Remote code execution and data theft, my favourite combination! Isn't this effectively why people are warned to avoid 'ai powered browsers' too? It appears difficult to do appropriate safeguards on these…
BigG 4 days ago +1

Blind trust generally equates to disaster. As told here: https://www.reddit.com/r/ClaudeAI/comments/1pgxckk/claude_cli_deleted_my_entire_home_directory_wiped/

cstanton 4 days ago

Remote code execution and data theft, my favourite combination!

Isn't this effectively why people are warned to avoid 'ai powered browsers' too? It appears difficult to do appropriate safeguards on these tools.
Cancel
Vote Up +1 Vote Down

Sign in to reply

Cancel
BigG 4 days ago

Blind trust generally equates to disaster. As told here: https://www.reddit.com/r/ClaudeAI/comments/1pgxckk/claude_cli_deleted_my_entire_home_directory_wiped/
Cancel
Vote Up +1 Vote Down

Sign in to reply

Cancel
michaelkellett 4 days ago in reply to cstanton

cstanton said:
It appears difficult to do appropriate safeguards on these tools.

All too true - what baffles me is the rush to use them.

MK
Cancel
Vote Up 0 Vote Down

Sign in to reply

Cancel
balajivan1995 4 days ago in reply to cstanton

cstanton said:
Remote code execution and data theft, my favourite combination!

Technically, you don't even need AI for that. Installing extensions from VS code marketplace is enough.
Threat Actors Keep Weaponizing VS Code Extensions -- Visual Studio Magazine
Cancel
Vote Up +3 Vote Down

Sign in to reply

Cancel
Jan Cumps 4 days ago in reply to michaelkellett
Cancel
Vote Up +1 Vote Down

Sign in to reply

Cancel
robogary 4 days ago

Scotty (Star Trek Chief Engineer) : The more they overthink the plumbing, the easier it is to stop up the drain.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Cancel
DAB 3 days ago

I agree, there is no way you can trust outside software without extensive review and verification.

I come from an environment where trust has to be earned.
Cancel
Vote Up +1 Vote Down

Sign in to reply

Cancel