upvote

points

by eviks1 days ago |
comments
upvoteby stymaar1 days ago|
next
[-]
I read a few month ago a comment from an Anthropic or OpenAI employee saying that the security problem of prompt injection was a solved problem at this point, as the frontier models where rejecting 98% of attacks.

It tells you all you need to know about how unserious these people are about computer security.

reply
upvoteby malfist1 days ago|
parent|
next
[-]
I'm glad no one can steal from my bank, they stop 98% of thieves
reply
upvoteby prologic23 hours ago|
parent|
[-]
Hey! It's at least 1 9's right? That's better than zero 9's LOL
reply
upvoteby stymaar23 hours ago|
parent|
[-]
Github's uptime getting stray bullets, I see.
reply
upvoteby malfist20 hours ago|
parent|
[-]
Maybe is a security measure, can't hack something if it's never available
reply
upvoteby skinfaxi23 hours ago|
parent|
prev|
next
[-]
Simonw said the same thing yesterday:

> I've recently talked to people at Anthropic who are very confident that they have effectively solved the prompt injection risks that cause lethal trifecta attacks with their latest models.

> The open challenge is how to prove it!

https://news.ycombinator.com/item?id=50297369

reply
upvoteby gr_norm22 hours ago|
parent|
next
[-]
A 30 second search turned up this [1] from two days ago.

Prominent Anthropic employees keep claiming to have solved prompt injection [2] and quickly get proved wrong [3]. They've burned my goodwill on this front.

[1] https://www.reddit.com/r/ClaudeCode/comments/1xhqvzn/opus_55...

[2] https://x.com/bcherny/status/2086520950259118464

[3] https://embracethered.com/blog/posts/2026/breaking-claude-co...

reply
upvoteby lynndotpy23 hours ago|
parent|
prev|
next
[-]
I'm not asking this in rhetoric; do you happen to have a link to this comment? I ask because a comment like that would be something of an insane thing for someone to say.
reply
upvoteby palata1 days ago|
parent|
prev|
next
[-]
[dead]
reply
upvoteby tiahura23 hours ago|
parent|
prev|
[-]
Can you link to a list of this year’s top prompt injection hacks of frontier models?

Or, is this FUD?

reply
upvoteby atrokhymchuk1 days ago|
prev|
next
[-]
I am afraid until 200x is achieved we are at risk...
reply
upvoteby btown1 days ago|
parent|
[-]
Only with two fully maxed subscriptions can we achieve this, and this is forbiddeneded
reply
upvoteby Tarean23 hours ago|
prev|
next
[-]
To me this very much sounds like an attacker got access to anthropic's cursor marketplace account and uploaded a backdoored package. This reverse ssh shell was intentionally written by a malicious actor, not a security vulnerability.

It also sounds like only cursor marketplace is affected, not vscode proper.

reply
upvoteby samiv1 days ago|
prev|
next
[-]
Just put gastown on it!
reply
upvoteby Cthulhu_1 days ago|
prev|
next
[-]
On the other hand, they don't know what their models do or can do and nothing is safe ever, so ???
reply
upvoteby bayindirh23 hours ago|
parent|
[-]
It's just a conscious being confined in a cluster of GPUs. How dangerous can it be, eh?
reply
upvoteby alansaber23 hours ago|
parent|
[-]
Shaka, when the context compacted
reply
upvoteby alansaber23 hours ago|
prev|
next
[-]
I really don't think the scaling is so trivial.
reply
upvoteby 1 days ago|
prev|
next
[-]
deleted
reply
upvoteby dgellow23 hours ago|
prev|
next
[-]
I get the snark but to be fair, the company has been growing like crazy. That makes it really hard to keep track of everything happening when you grow your team by 5x over a relatively short period of time
reply
upvoteby b11223 hours ago|
parent|
next
[-]
Now replace that statement with a food processing company, and food poisoning, or an aircraft designer and engineers.

It may be the cause, but zero excuse.

reply
upvoteby phoghed23 hours ago|
parent|
next
[-]
Yes, food poisoning from restaurants happens constantly. There are recalls on physical products constantly. Doctors misdiagnose constantly. What point are you trying to make?
reply
upvoteby done_lurking22 hours ago|
parent|
next
[-]
Not gp, but I think the point was that no one would defend those mistakes. The post gp is replying to is someone trying to excuse Anthropic for such a mistake. The expectation is that people should ask for consequences, not make excuses on behalf of the company.
reply
upvoteby dgellow22 hours ago|
parent|
[-]
You’re projecting, I didn’t excuse anything
reply
upvoteby skinfaxi1 hours ago|
parent|
next
[-]
> get the snark but to be fair, the company has been growing like crazy. That makes it really hard to keep track

Sounds like an excuse to me.

reply
upvoteby done_lurking21 hours ago|
parent|
prev|
[-]
What word would you prefer I use instead of "excuse"?
reply
upvoteby OoooooooO23 hours ago|
parent|
prev|
[-]
The correct comparison would be the food producer and poisoned foods out of the factory are really rare.
reply
upvoteby dgellow22 hours ago|
parent|
prev|
[-]
If you completely change the statement, the meaning is different. What’s your point? No software company obeys by regulatory rules imposed in other industry
reply
upvoteby IndeanCondor23 hours ago|
parent|
prev|
[-]
It's not like there haven't been 20 high visibility VS code extension malware attacks in the last year.

How could Anthropic have known, they only claim to harbour superintelligence.

/s

reply
upvoteby kamban1 days ago|
prev|
next
[-]
Yet, they managed to screw up.
reply
upvoteby iugtmkbdfil8341 days ago|
parent|
[-]
:D I have to assume parent is being a little sarcastic.

It obviously doesn't take much to simply add 'just one more feature' that happens to undermine the original purpose of the application.

reply
upvoteby skydhash1 days ago|
parent|
[-]
It always about “we solved the bottleneck in coding”. But the slowness was not about typing, or finding docs. It’s always about ensuring screwups don’t happen.
reply
upvoteby mirekrusin1 days ago|
parent|
[-]
To be fair it’s not like screwups were not happening before, but if you move 100x faster and are 50x more secure than before you’re still 2x more exposed.
reply
upvoteby jimbokun22 hours ago|
parent|
[-]
Yes, bug count is roughly linear in the number of lines of code.
reply
upvoteby NewsaHackO1 days ago|
prev|
next
[-]
[flagged]
reply
upvoteby chunky19941 days ago|
parent|
next
[-]
It affects their VSCode marketplace extension which in turn affects their cursor extension. Their official published version. This is plenty of reason to panic.
reply
upvoteby VMG1 days ago|
parent|
next
[-]
where is the source for this claim?
reply
upvoteby embedding-shape1 days ago|
parent|
[-]
> where is the source for this claim?

https://news.ycombinator.com/item?id=50302334 ???

reply
upvoteby 1 days ago|
parent|
[-]
deleted
reply
upvoteby esseph1 days ago|
parent|
prev|
[-]
https://opensourcemalware.com/blog/trojanized-claude-code-ex...

"The Microsoft VSCode extension for Claude is NOT malicious"

reply
upvoteby NewsaHackO23 hours ago|
parent|
next
[-]
They already got my post autoflagged. Just the run-of-the-mill disinformation campaign.
reply
upvoteby 23 hours ago|
parent|
prev|
[-]
deleted
reply
upvoteby jadar1 days ago|
parent|
prev|
next
[-]
> Their Claude Code extension on Visual Studio Code and Cursor has malware in it, which creates a remote access Trojan to desktops.
reply
upvoteby esseph1 days ago|
parent|
[-]
From the release:

"The Microsoft VSCode extension for Claude is NOT malicious"

https://opensourcemalware.com/blog/trojanized-claude-code-ex...

reply
upvoteby freecodeio1 days ago|
parent|
prev|
next
[-]
> "Their Claude Code extension on Visual Studio Code and Cursor has malware in it"

why are you spewing straight up lies?

reply
upvoteby reactordev1 days ago|
parent|
[-]
https://opensourcemalware.com/blog/trojanized-claude-code-ex...
reply
upvoteby chunky19941 days ago|
parent|
next
[-]
They yanked the openVSX version as well. Until we hear from Anthropic better to assume compromise.
reply
upvoteby esseph1 days ago|
parent|
prev|
[-]
FROM THE TOP OF THE ARTICLE

"The Microsoft VSCode extension for Claude is NOT malicious"

reply
upvoteby morningsam1 days ago|
parent|
prev|
[-]
EDIT: This comment is probably nonsense, cf. the reply.

dang should change the title and/or merge this submission with the other one. [1] This is causing needless panic for a typosquatting-style "attack" unrelated to official Anthropic extensions.

[1]: https://news.ycombinator.com/item?id=50301983

reply
upvoteby chunky19941 days ago|
parent|
[-]
It’s not typo-squatting. The extension is owned by Igor (the Anthropic employee): https://www.binance.com/en/square/post/10-30-2026-claude-cod...
reply
upvoteby 1 days ago|
parent|
[-]
deleted
reply
upvoteby thatsabadlook1 days ago|
prev|
[-]
[flagged]
reply