upvote
It also sends all of your prompts to Grok's free tier by default, and the free tier trains on your submitted information, X AI can do whatever they want with that, including building ad profiles, etc.

You need to set an explicit "small model" in OpenCode to disable that.

reply
This. I work on projects that warrant a self hosted model to ensure nothing is leaked to the cloud. Imagine my surprise when I discovered that even though the only configured model is local, all my prompts are sent to the cloud to... generate a session title. Fortunately caught during testing phase.
reply
I’m curious if there’s a reason you’re not just coding in a container without access to the internet, or some similar setup? If I was worried about things in my dev chain accessing any cloud service, I’d be worried about IDE plugins, libraries included in imports, etc. and probably not want internet access at all.
reply
From the code, this does not seem to be true anymore. It falls back to the current model if no small model is identified with the current provider. https://github.com/anomalyco/opencode/blob/9b805e1cc4ba4a984...
reply
It uses a model called "Big Pickle" by default which is an alias for minimax 2.5, as far as I've been able to tell.
reply
Wait what. For real? I knew their security posture was bad, but this bad??
reply
I second that.

Have fun on windows - automatic no from me. https://github.com/anomalyco/opencode/issues?q=is%3Aissue%20...

reply
No surprise that a tool that can run shell scripts, open URLs, etc. is flagged down on Windows where AV try to detect such trojan methods.
reply
Who cares about Windows?
reply
people who don't make OS preferences their entire personality
reply
I do: they're important for ventilation in this heat wave.
reply
People who don't like messing around with drivers and like running Linux VMs on a Windows OS.
reply
I think the parent meant vs MacOS, not vs Linux.
reply
Users of MacOS rarely have an active dislike for Windows, nor are they likely to announce this.
reply
Driver issues are way more of a thing on Windows than Linux or MacOS.
reply
Getting hardware to work is MUCH harder on Linux
reply
What? Drivers?
reply
RCE is exactly the feature of coding agents. I'm happy with it that I don't need to launch OpenCode with --dangerously-skip every time.
reply
No, it is still configurable. You can specify in your opencode.json config that it should be able to run everything. I think they just argued that it shouldn't be the default. Which I agree with.
reply
I assign a specific user for it, which doesn't have much access to my files. So what I want is complete autonomy.
reply
[dead]
reply
[dead]
reply