Login
You're viewing the y.diskcat.com public feed.
  • huklhukl@chaos.social
    Nov 2, 2026, 9:49 AM

    @hhf Uhm that compromised extension might make you vibe code malicious programs without you realizing. Ie. if you depend that much and integrate LLMs that deeply into your tool chain and you don’t even attempt to understand how the generated code works … well it’s a glorious new avenue for a bot network the world has never seen before :D

    Whether it’s that “free LLM from China” or the big platforms owned by tech fashists - blended with gullible end users … mhmm what a recipe - don’t you think?

    💬 1🔄 0⭐ 0

Replies

  • hhfhhf@chaos.social
    Nov 2, 2026, 10:03 AM

    @hukl ah, now I get your drift. For me, VSC extensions have been an issue for a long time, as MSFT (or here, Cursor) do not do significant QA and there have been “evil” extensions before. So for me there is no inherent connection.

    💬 1🔄 0⭐ 0
  • huklhukl@chaos.social
    Nov 2, 2026, 10:15 AM

    @hhf for there is a different philosophical quality about it as the underlying technology is able to deceive. Not just by accident but as an acceptable optimization / solution to a problem. It is also biased - not by the user but by the creator / platform owner and what materials they chose to train the model on. Oh the model is “fluent” in social engineering?

    This is maybe extrapolating / projecting - but maybe not. Basically I’m playing out hypothetical “Security Nightmares” bullet points :)

    💬 0🔄 0⭐ 0