←back to thread

Claude Sonnet will ship in Xcode

(developer.apple.com)
485 points zora_goron | 1 comments | | HN request time: 0s | source
Show context
breadwinner ◴[] No.45059612[source]
It seems every IDE now has AI built-in. That's a problem if you're working on highly confidential code. You never know when the AI is going to upload code snippets to the server for analysis.
replies(13): >>45059623 #>>45059634 #>>45059661 #>>45059894 #>>45059943 #>>45060054 #>>45060064 #>>45060101 #>>45060121 #>>45060510 #>>45060668 #>>45061092 #>>45061687 #
tcoff91 ◴[] No.45059634[source]
Neovim and Emacs don’t have it built in. Use open source tools.
replies(1): >>45060072 #
simonh ◴[] No.45060072[source]
They both support it via plugins. Xcode doesn’t enable it by default, you need to enable it and sign into an account. It’s not really all that different.
replies(2): >>45060175 #>>45070755 #
renewiltord[dead post] ◴[] No.45060175{3}[source]
[flagged]
TheDong ◴[] No.45060401{4}[source]
What commonly gets installed in those cases is actual malware, a RAT (Remote Admin Tool) that lets the attacker later run commands on your laptop (kinda like an OpenSSH server, but also punching a hole through nat and with a server that they can broadcast commands broadly to the entire fleet).

If the attacker wants to use AI to assist in looking for valuables on your machine, they won't install AI on your machine, they'll use the remote shell software to pop a shell session, and ask AI they're running on one of their machines to look around in the shell for anything sensitive.

If an attacker has access to your unlocked computer, it is already game over, and LLM tools is quite far down the list of dangerous software they could install.

Maybe we should ban common RAT software first, like `ssh` and `TeamViewer`.

replies(2): >>45060474 #>>45060523 #
renewiltord[dead post] ◴[] No.45060474{5}[source]
[flagged]
1. TheDong ◴[] No.45060509{6}[source]
You know, I should have realized this was a troll account with the previous comment.

I guess that's on me for being oblivious enough that it took this obvious of a comment for me to be sure you're intentionally trolling. Nice work.