Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Unauthenticated remote code execution in OpenCode

cy.md

Post reply on HN
Print view View original

71–80 of 155 posts

Re: Unauthenticated remote code execution in OpenCode

#71

Post by kachapopopow »

people run AI tools outside a sandbox? tf? the first thing I did with claude code is put it in a sandbox.

come on people, docker and podman exist, please use them - it isolates you not only from problems like this but supply chain attacks as well.

it also has superior compatibility, any person working on your project will have all the tools available to compile it since to build & run it you use a simple Containerfile.

(rather outdated now: https://github.com/DeprecatedLuke/claude-loop)

Re: Unauthenticated remote code execution in OpenCode

#72

Post by tomrod »

kaliszad wrote: post #52

Many people seem to be running OpenCode and similar tools on their laptop with basically no privilege separation, sandboxing, fine-grained permissions settings in the tool itself. This tendency is reflected also by how many plugins are designed, where the default assumption is the tool is running unrestricted on the computer next to some kind of IDE as many authentication callbacks go to some port on localhost and th…

Hi.

> Please run at least a dev-container or a VM for the tools.

I would like to know how to do this. Could you share your favorite how-to?

Re: Unauthenticated remote code execution in OpenCode

#73

Post by blindseer »

Lots of the same people that were behind: https://www.terminal.shop/

afaict, for that project they never went through PCI compliance. See original thread for more information: https://news.ycombinator.com/item?id=40228751

They seem to not have a lot of real world experience and/or throw caution to the wind and YOLO through security practices. I'd be weary using any of their products.

Re: Unauthenticated remote code execution in OpenCode

#77

Post by shimman »

Gigachad wrote: post #51
shimman wrote: post #46

Earlier quoted context omitted.

In my limited existence on this earth, talk is very cheap and actions should matter more.

Good idea. Start sending in some PRs to contribute then.

Unless they've recently invented a shitpost to typescript compiler, I'm afraid I'll have to devote my time elsewhere.

Re: Unauthenticated remote code execution in OpenCode

#78

Post by bopbopbop7 »

capybarafriend wrote: post #43

fwiw they should probably slow down a bit, even though they seem to be winning the race. they started selling their own subscription plan last week, and promptly committed all subscriber’s emails to the public repo > Hey - have some bad news. > We accidentally committed your email to our repo as part of a script that was activating OpenCode Black. > No other information was included, just the email on its own.

I can't believe they keep on forgetting to add "make it secure" to the end of their prompts.

Re: Unauthenticated remote code execution in OpenCode

#79

Post by Maxious »

Imustaskforhelp wrote: post #57
theshrike79 wrote: post #44

Earlier quoted context omitted.

As someone who uses the two big C's, I can recommend ampcode[0] and Crush[1]+z.ai GLM as an addition. Amp can do small utility scripts and changes for free (especially if you enable the ads) and Crush+GLM is pretty good at following plans done by Claude or Codex [0] https://ampcode.com/ [1] https://github.com/charmbracelet/crush

Okay I am genuinely curious by what you mean ads. This is the first time I heard of the concept of ads in something like these code agents

There's screenshots here, they're visually seperated from the actual response https://x.com/connorado/status/2009707660988559827

Re: Unauthenticated remote code execution in OpenCode

#80

Post by Imustaskforhelp »

Maxious wrote: post #79
Imustaskforhelp wrote: post #57

Earlier quoted context omitted.

Okay I am genuinely curious by what you mean ads. This is the first time I heard of the concept of ads in something like these code agents

There's screenshots here, they're visually seperated from the actual response https://x.com/connorado/status/2009707660988559827

An Ad based model although sucks, still feels like a decent model of income than companies which provide inference at loss making, interesting.

I hate the Ad models but I am pretty sure that most code gets trained in AI anyway and the code we generate would probably not be valuable metric (usually) to the ad company.

Interesting, what are your thoughts about it? Thanks for sharing this. Is the project profitable because I assume not, not sure how much advertisements costs would be there.

Post reply on HN