What are the security implication of this? Can you really trust an external entity arbitrarily sending commands as responses. The attack surface is huge and I expect we'll see AI integration as shocking as telnet support at some point in the future.
iTerm2 3.5.0
121–130 of 167 posts
Re: iTerm2 3.5.0
#122I really just don’t want software to have these ai things in them. How long are they going to maintain it? If they want to allow extensibility for the explicit purpose of Llm integration then why not just… make an API?
They use OpenAI's API with the possibility to set a custom URL, so... done. This makes iTerm compatible with any LLM as long as they implement the same API. OpenAI's API is the de facto standard for now, it's not up to iTerm to define a standard.
So it makes an RPC to an unaudited external server for which they have a reputation for notoriety and stealing Scarlett's voice?
Re: iTerm2 3.5.0
#123So what are the good Mac-centric alternatives for folks who don't want OpenAI snooping around their terminal? Warp already went all-in on AI and cloud, now iTerm headed down that same path. Alacritty? Kitty? Hyper?
I'm really happy with WezTerm https://wezfurlong.org/wezterm/
Wow. Doesn't appear to use Electron!
Re: iTerm2 3.5.0
#124Earlier quoted context omitted.
Nothing in the changelog indicated that “OpenAI is now snooping around”. There is an optional feature that you need to set up yourself if you want to use it. Why do you feel like you need to deliberately misunderstand the post as soon as you read the term “AI” somewhere?
None of that is remotely clear when updating through the iTerm2 auto-update popup for a minor version update. The Preferences panel doesn't have a single indicator which says whether the AI integration is activated or not. It's probably just bad UI design and not mischief, but I was instantly put off by what initially looked like a dark pattern. PS: even the changelog doesn't explicitly state that the feature is disa…
> PS: even the changelog doesn't explicitly state that the feature is disabled by default, only indirectly by stating that one needs an OpenAI key because requests cost money.
The changelog reads
> You will need to provide an OpenAI API key since GPT costs money to use.
One can only misinterpret that to mean the feature is auto-enabled accidentally on purpose. The fact that you cared to edit your comment with that excuse but didn't retract even a single falsehood you spread all over this thread is bad enough. But to continue to pretend that it doesn't require a paid API key even after you explicitly acknowledged that it does? Outright malicious.
> AFAIK using OpenAI through the webpage doesn't cost money, why should I assume that using it through the REST API is any different?
Re: iTerm2 3.5.0
#125I'm waiting for the FBI to infiltrate OpenAI and force them to report everything under secret NDA. AI services are a tool to track and convict hackers.
Re: iTerm2 3.5.0
#126Earlier quoted context omitted.
They use OpenAI's API with the possibility to set a custom URL, so... done. This makes iTerm compatible with any LLM as long as they implement the same API. OpenAI's API is the de facto standard for now, it's not up to iTerm to define a standard.
So it makes an RPC to an unaudited external server for which they have a reputation for notoriety and stealing Scarlett's voice?
It doesn't, it CAN do it. In the same way you can use curl in iTerm to call OpenAI servers. But if you don't do it, it won't do it on its own.
Re: iTerm2 3.5.0
#127A lot of the comments mention the AI inclusion from an LLM-is-everywhere point of view. I'm also a little confused about why behaviour like that is in a terminal rather than a shell ? To my mind I just want the terminal to render text and handle input, and then it's my shell's job to define behaviour of commands etc. I find that a super helpful distinction- what if you like iterm but want a different shell like fish…
iTerm is a feature-packed terminal emulator that's had shell-integration and various smart features to automatically trigger actions based on the terminal text content for a long time, long before the current AI wave.
That makes sense then! I hadn't realises this about iterm since I've never used it- it seems like a blurring of the lines between shell and terminal that I wouldn't want, but maybe I'm not the target user.
Re: iTerm2 3.5.0
#128they really put ai in my iterm
Re: iTerm2 3.5.0
#129Earlier quoted context omitted.
> good Mac-centric alternatives for folks who don't want OpenAI snooping around their terminal iTerm, since they don't do that. Just keep it disabled. Unless you consider any terminal that lets you make network calls to OpenAI = OpenAI snooping around.
I don't think "it's fine, I unchecked the OpenAI checkbox" is going to make my HIPAA/SOC2 auditor very happy
This is a firewall issue, not a software issue. If your auditor think you shouldn't call OpenAI servers, they should ask the network team to set firewall rules in place.
Re: iTerm2 3.5.0
#130Earlier quoted context omitted.
> Is it just me, or allowing hallucinations into my terminal a line that I am not willing to cross? Depends how you use it. For example, writing jq filters, or awk scripts, or some shell pipelines is always a bit of a pain. It's something where LLMs can really improve quality of life.
Or, you know, we could actually build approachable tools, instead of using AI to paper over the UX shortcomings of programs from the 80's...
Not everything is a UI issue though. Some software just is complex. There's nothing wrong with asking for help, be it with an AI or with a colleague.