Comment by eviks
1 day ago
That's literally impossible, with all the access to the frontier software development tools at their disposal they can ship features securely at 100x
1 day ago
That's literally impossible, with all the access to the frontier software development tools at their disposal they can ship features securely at 100x
I read a few month ago a comment from an Anthropic or OpenAI employee saying that the security problem of prompt injection was a solved problem at this point, as the frontier models where rejecting 98% of attacks.
It tells you all you need to know about how unserious these people are about computer security.
I'm glad no one can steal from my bank, they stop 98% of thieves
Hey! It's at least 1 9's right? That's better than zero 9's LOL
2 replies →
Simonw said the same thing yesterday:
> I've recently talked to people at Anthropic who are very confident that they have effectively solved the prompt injection risks that cause lethal trifecta attacks with their latest models.
> The open challenge is how to prove it!
https://news.ycombinator.com/item?id=50297369
A 30 second search turned up this [1] from two days ago.
Prominent Anthropic employees keep claiming to have solved prompt injection [2] and quickly get proved wrong [3]. They've burned my goodwill on this front.
[1] https://www.reddit.com/r/ClaudeCode/comments/1xhqvzn/opus_55...
[2] https://x.com/bcherny/status/2086520950259118464
[3] https://embracethered.com/blog/posts/2026/breaking-claude-co...
https://xkcd.com/1161/
I'm not asking this in rhetoric; do you happen to have a link to this comment? I ask because a comment like that would be something of an insane thing for someone to say.
[dead]
Can you link to a list of this year’s top prompt injection hacks of frontier models?
Or, is this FUD?
https://genai.owasp.org/2026/07/08/genai-and-agentic-ai-expl...
I am afraid until 200x is achieved we are at risk...
Only with two fully maxed subscriptions can we achieve this, and this is forbiddeneded
To me this very much sounds like an attacker got access to anthropic's cursor marketplace account and uploaded a backdoored package. This reverse ssh shell was intentionally written by a malicious actor, not a security vulnerability.
It also sounds like only cursor marketplace is affected, not vscode proper.
Just put gastown on it!
On the other hand, they don't know what their models do or can do and nothing is safe ever, so ???
It's just a conscious being confined in a cluster of GPUs. How dangerous can it be, eh?
Shaka, when the context compacted
I really don't think the scaling is so trivial.
I get the snark but to be fair, the company has been growing like crazy. That makes it really hard to keep track of everything happening when you grow your team by 5x over a relatively short period of time
Now replace that statement with a food processing company, and food poisoning, or an aircraft designer and engineers.
It may be the cause, but zero excuse.
Yes, food poisoning from restaurants happens constantly. There are recalls on physical products constantly. Doctors misdiagnose constantly. What point are you trying to make?
4 replies →
If you completely change the statement, the meaning is different. What’s your point? No software company obeys by regulatory rules imposed in other industry
[dead]
It's not like there haven't been 20 high visibility VS code extension malware attacks in the last year.
How could Anthropic have known, they only claim to harbour superintelligence.
/s
Yet, they managed to screw up.
:D I have to assume parent is being a little sarcastic.
It obviously doesn't take much to simply add 'just one more feature' that happens to undermine the original purpose of the application.
It always about “we solved the bottleneck in coding”. But the slowness was not about typing, or finding docs. It’s always about ensuring screwups don’t happen.
2 replies →
[flagged]
It affects their VSCode marketplace extension which in turn affects their cursor extension. Their official published version. This is plenty of reason to panic.
where is the source for this claim?
2 replies →
https://opensourcemalware.com/blog/trojanized-claude-code-ex...
"The Microsoft VSCode extension for Claude is NOT malicious"
2 replies →
> Their Claude Code extension on Visual Studio Code and Cursor has malware in it, which creates a remote access Trojan to desktops.
From the release:
"The Microsoft VSCode extension for Claude is NOT malicious"
https://opensourcemalware.com/blog/trojanized-claude-code-ex...
> "Their Claude Code extension on Visual Studio Code and Cursor has malware in it"
why are you spewing straight up lies?
https://opensourcemalware.com/blog/trojanized-claude-code-ex...
2 replies →
EDIT: This comment is probably nonsense, cf. the reply.
dang should change the title and/or merge this submission with the other one. [1] This is causing needless panic for a typosquatting-style "attack" unrelated to official Anthropic extensions.
[1]: https://news.ycombinator.com/item?id=50301983
It’s not typo-squatting. The extension is owned by Igor (the Anthropic employee): https://www.binance.com/en/square/post/10-30-2026-claude-cod...
1 reply →
[flagged]