161–170 of 334 posts
Earlier quoted context omitted.
I guess it's easier to solve Erdos problems and improve the lower bound of the Riemann hypothesis, than it is to solve Linux desktop app distribution.
LOL! Though as someone who shipped commercial software on Linux, it wasn't that bad, you just had to ship everything other than the kernel.
Earlier quoted context omitted.
And that's not a joke, I made the mistake of installing this on my Windows machine just to test it out quickly last week. It created 2 new users and then assigned new NTFS permissions for every single file under my user directory to them. This of course wrecked havoc, ssh refused to work, several applications refusing to start and a ton of permission errors. It did this without even a warning in the background and it…
I would love to see your prompt(s) and how you managed to make it do this. I’ve been using Codex in full access mode constantly for the past couple months on a Pro plan and I haven’t had a single incident like this. I’ve used it across macOS, Linux, and Windows as well, so my usage isn’t limited to a specific setup either.
Why not create a separate account on Linux just for the agent? This security measure should also be enabled by default. Many packages REQUIRE the creation of an account, but agents do not. Interesting.
Also these things are supposed to help you, their idea is that you give it access and it's helpful proportional to the access you give it. A separate user works for some, especially when vibecoding, you whitelist accesses. But for general computer usage, an assistant that has access to your files and acts as a sort of OS needs your user access.
Earlier quoted context omitted.
With exception of VSCode, because I have no choice due to some plugins, or apps required by customer projects where I have no other option as well, nothing else based on Electron pollutes my computers.
You always have a choice to use/learn/make a different tool. It’s a prison of your own making. I’ve personally adopted a process where I structure my projects to ALWAYS keep credentials and sensitive information in a separate directory. The working copy gets rsynced to and from a dedicated VM with whatever $HARNESS.
Weak argument. People don't have infinite time. People just want tools they trust and that aren't enshitified.
Earlier quoted context omitted.
I guess it's easier to solve Erdos problems and improve the lower bound of the Riemann hypothesis, than it is to solve Linux desktop app distribution.
AppImage, yawn.
Reminder to everyone, treat these as trojans. Run them isolated from the rest of your system. Give it a full desktop in a VM if you want to, just not direct access to your system.
And that's not a joke, I made the mistake of installing this on my Windows machine just to test it out quickly last week. It created 2 new users and then assigned new NTFS permissions for every single file under my user directory to them. This of course wrecked havoc, ssh refused to work, several applications refusing to start and a ton of permission errors. It did this without even a warning in the background and it…
Earlier quoted context omitted.
If I have to deliver in technology X, customer isn't going to be happy getting Y instead, and I am not making my life miserable to work with editors lacking the specific tools, or that are forbidden by customer IT to be installed on provided equipment.
If your hypothetical client as security measure ONLY permits VSCode on a dedicated box you’re obligated to work on and have no control over - then I pray for you. And for your hypothetical client. Especially as judging by your description they despite this allow any VSCode plugin to be installed alongside it. > and I am not making my life miserable to work with editors lacking the specific tools And that’s the self-i…