Comment by kirth_gersen
1 day ago
This is why when I use AI, I still download from the browser and drag and drop the outputted files like a caveman. Sure, it's slower, but it keeps my mental model more up to date and has less security risks. I can even...like read the thing before I run it rather than giving a LLM access to my shell directly. Also anecdotally, it seems more token efficient for those who care about that.
That's not the actual hack though, it's with an extension. You could have gotten compromised this way through an extension for git or whatever.