Comment by ashishb
21 hours ago
The extensions does not need full access to the laptop.
When you are invited to someone's living room, you don't get to access their bedroom.
The idea that Claude should have full data access to the home directory is wrong. And as an industry leader, Claude has set a bad precedence.
It shouldn't.
Be as close as AGI we are (/s), this issue from 2018 is still open:
https://github.com/microsoft/vscode/issues/52116
I don't know what we are doing.
Probably a good idea to only run LLMs with a dedicated user account, or in a container.
Dedicated user account does not work as eventually all your code and data will move under that.
I run it in an ephemeral container sandbox (https://github.com/ashishb/amazing-sandbox) which has access to the current working directory and it drastically limits the attack radius.
If all the code and data eventually move into the dedicated user account, why wouldn't it also eventually move into the container/vm?
1 reply →
I’m fine with that. I use a top-level directory for all of my code, and restricting extension access to that directory is a great idea.
1 reply →
That looks really nice, including the VSCode/Mac wrapper.
For locally installed Code / Code-fork extensions, there is not any concept of permissions (at least on Windows or MacOS (+ the 3rd party code-server running on Linux)), correct?
Does it? It asks for permission to use whatever directory you call it in.