Pinned Tweet
Jitbit condemns this war. I'm from Russia originally and I'm ashamed of my passport right now. Forgive us Ukraine 🇺🇦 💙💛
7
0
45
Too bad I won't be able to vibe-code it obviously :)
Just had this crazy idea how to protect from hacking bots.
A JS-minifier - but adds sh*t to trigger LLM safeguards.
Mention Tiananmen square. Bioweapons testing. Radioactive poisoning.
Rename functions to
"initiateSecureVaultOverrride()" and "calculateLethalDosage()"
etc.
2
0
0
152
Just had this crazy idea how to protect from hacking bots.
A JS-minifier - but adds sh*t to trigger LLM safeguards.
Mention Tiananmen square. Bioweapons testing. Radioactive poisoning.
Rename functions to
"initiateSecureVaultOverrride()" and "calculateLethalDosage()"
etc.
A JS-minifier - but adds sh*t to trigger LLM safeguards.
Mention Tiananmen square. Bioweapons testing. Radioactive poisoning.
Rename functions to
"initiateSecureVaultOverrride()" and "calculateLethalDosage()"
etc.
8
4
24
2,665
We literally had an unidentified LLM scanning/flooding our entire cluster ths week.
Every payload was tagged "pentest 01-123 blahbla" b/c someone tricked a frontier model into believing it was doing legitimate security research.
It's TERRIFYINGLY easy. A 12-y.o. with zero CS knowledge can ask an agent to hack your app, then go play soccer with their friends.,. then get back to a wrecked app
the scariest part is - exact same offensive skills are being developed on the other side of the war.
Heck they can even use this one from cloudfalre!!!
Every payload was tagged "pentest 01-123 blahbla" b/c someone tricked a frontier model into believing it was doing legitimate security research.
It's TERRIFYINGLY easy. A 12-y.o. with zero CS knowledge can ask an agent to hack your app, then go play soccer with their friends.,. then get back to a wrecked app
the scariest part is - exact same offensive skills are being developed on the other side of the war.
Heck they can even use this one from cloudfalre!!!
run this on your codebase, today. trust me
9
1
79
16,517
So cute some founders be like “this AI agent will be my ‘chief of staff’ and this Agent will be my ‘VP of marketing’ and this Agent will be my lead developer”
… so they can fit into your tiny scared human head.
… so they can fit into your tiny scared human head.
1
0
5
323
Back in June, I was choosing a motorcycle riding school.
One had this absolutely flawless, stunning website. With cards, badges, svg animations and gradients.
...as in "something your 14-year-old nephew put together in 15 minutes".
The other had the jankiest website imaginable, hosted on some free hosting service, with a broken YouTube embed.
...but had a ton of genuine Google reviews from the locals and actual videos of the owner lady explaining "all the ways the examiner will try to fail you."
Guess which one I went with
One had this absolutely flawless, stunning website. With cards, badges, svg animations and gradients.
...as in "something your 14-year-old nephew put together in 15 minutes".
The other had the jankiest website imaginable, hosted on some free hosting service, with a broken YouTube embed.
...but had a ton of genuine Google reviews from the locals and actual videos of the owner lady explaining "all the ways the examiner will try to fail you."
Guess which one I went with
1
0
1
165
Tiny writeup to clear things up:
- @cursor_ai is the only editor affected
- Cursor (obviously) is not using MSFT vscode extensions library
- Cursor (apparently) is not using Open-VSX either!
- What they use is their own "Cursor's marketplace" which no one knows what it is exactly and looks like it is proxying open-vsx marketplace (?)
- THAT "Cursor's markeplace" is what got hacked
Devs using windsurf/antigravity/etc - are safe.
- @cursor_ai is the only editor affected
- Cursor (obviously) is not using MSFT vscode extensions library
- Cursor (apparently) is not using Open-VSX either!
- What they use is their own "Cursor's marketplace" which no one knows what it is exactly and looks like it is proxying open-vsx marketplace (?)
- THAT "Cursor's markeplace" is what got hacked
Devs using windsurf/antigravity/etc - are safe.
WTF, this needs more attention!!
> backdoor in the official Claude Code for VS Code extension bundle on the Cursor Marketplace that drops a persistent SSH backdoor
1
0
3
251
How to check if you're affected:
Check Cursor local update log at ~/Library/Application Support/Cursor/logs/
If it records installing Claude Code 2.1.313 - you're affected. check your ssh keys etc etc
Same for windsurf, antigravity, devon whatever IDE you use
If you don't know how to check - just give the news link to AI agent and ask to check your machine (~/ssh/authorized_keys etc etc )
Check Cursor local update log at ~/Library/Application Support/Cursor/logs/
If it records installing Claude Code 2.1.313 - you're affected. check your ssh keys etc etc
Same for windsurf, antigravity, devon whatever IDE you use
If you don't know how to check - just give the news link to AI agent and ask to check your machine (~/ssh/authorized_keys etc etc )
WTF, this needs more attention!!
> backdoor in the official Claude Code for VS Code extension bundle on the Cursor Marketplace that drops a persistent SSH backdoor
0
0
0
162
WTF, this needs more attention!!
> backdoor in the official Claude Code for VS Code extension bundle on the Cursor Marketplace that drops a persistent SSH backdoor
> backdoor in the official Claude Code for VS Code extension bundle on the Cursor Marketplace that drops a persistent SSH backdoor
3
1
4
721
Hot take:
A lot of SaaS products will go freemium - or even completely free - and monetize by selling data to AI labs.
This isn't just a prediction, data brokers are actively approaching companies.
A lot of SaaS products will go freemium - or even completely free - and monetize by selling data to AI labs.
This isn't just a prediction, data brokers are actively approaching companies.
4
0
17
1,762
Young people actively hate AI.
My two younger daughters are 19 and 18, both at universities - one in the UK the other in Italy. Through them, I happen to know quite a few kids their age.
And ALL OF THEM seem to universally hate AI.
To them it's "something old people invented that we now have to deal with... as if climate change wasnt enough"
AI is cringe. When they introduce me to their friends, they literally say "heyya, meet my dad, he's a software engineer but nonono, NOT IN AI, dont worry, hahah".
They hate it for flooding their social feeds with slop, ruining music, taking phone scams to the next level, also destroying careers & devaluing their hobbies - why become an architect, this skill is about to become worthless? Why learn a musical instrument if session musicians are already obsolete?
The outcome is interesting, though - they're spending less and less time on public social, meeting up IRL, moving their online lives into private group chats with actual verified friends. TikTok and Reels are increasingly cringe-something for old dudes.
Which, I guess, might be a net positive after all...
My two younger daughters are 19 and 18, both at universities - one in the UK the other in Italy. Through them, I happen to know quite a few kids their age.
And ALL OF THEM seem to universally hate AI.
To them it's "something old people invented that we now have to deal with... as if climate change wasnt enough"
AI is cringe. When they introduce me to their friends, they literally say "heyya, meet my dad, he's a software engineer but nonono, NOT IN AI, dont worry, hahah".
They hate it for flooding their social feeds with slop, ruining music, taking phone scams to the next level, also destroying careers & devaluing their hobbies - why become an architect, this skill is about to become worthless? Why learn a musical instrument if session musicians are already obsolete?
The outcome is interesting, though - they're spending less and less time on public social, meeting up IRL, moving their online lives into private group chats with actual verified friends. TikTok and Reels are increasingly cringe-something for old dudes.
Which, I guess, might be a net positive after all...
879
841
7,295
563,546
3 months ago I reported a bug at Codex github repo (models not showing up in Codex extensions in Cursor, Windsurf, AntiGravity etc.)
The cause is known.
Still hasn't been fixed.
3 months!
AI solved coding. But coding was never the problem. Even frontier labs are slow AF.
The cause is known.
Still hasn't been fixed.
3 months!
AI solved coding. But coding was never the problem. Even frontier labs are slow AF.
6
0
8
842
The moment AI gets good at something - video, marketing, copywriting etc - that thing becomes worthless.
And it's so cute how founders say "but I'll fine-tune it for my product and my clients"
Yeah right
"Banner blindness won't affect me I'll just make BETTER BANNERS"
And it's so cute how founders say "but I'll fine-tune it for my product and my clients"
Yeah right
"Banner blindness won't affect me I'll just make BETTER BANNERS"
1
0
3
267
This is a cool, smart and very sad blog post on AI and the future it paints.
borretti.me/article/no-man…
borretti.me/article/no-man…
0
2
8
425