Show HN: An MIT-licensed ChatGPT plugin that loads and edits files locally

Post by ackbar03 » Tue, Aug 01, 2023, 5:02 AM UTC

Post by ykdojo » Tue, Aug 01, 2023, 5:55 AM UTC

ackbar03 wrote: post #2

does it conveniently backdoor my code for the NSA?

Post by DougN7 » Tue, Aug 01, 2023, 12:03 PM UTC

ykdojo wrote: post #5

samuli wrote: post #3

I guess the next step in humanity's finale is then for someone to create a worm, which installs this plugin automatically to all machines that haven't been patched up to the latest level.

I'm not sure how serious you are with this comment, but feel free to look at the source code. It only has access to files you've explicitly added to the project directory.

Post by Eddy_Viscosity2 » Tue, Aug 01, 2023, 2:34 PM UTC

ykdojo wrote: post #4

ackbar03 wrote: post #2

does it conveniently backdoor my code for the NSA?

It's open sourced. Why don't you take a look?

Post by server_man3000 » Thu, Aug 03, 2023, 4:55 AM UTC

ykdojo wrote: post #9

Eddy_Viscosity2 wrote: post #8

Earlier quoted context omitted.

Because there are people who are smarter than me who can put in such access in ways I can't detect with my, at best, modest coding knowledge.

The code is pretty straightforward and not that large. I feel like the only possibility of such an exploit would probably be through Docker itself - or some sort of cross site scripting.