← Back to context

Comment by JeremyNT

21 hours ago

If this isn't a damning indictment of Cursor, I don't know what is. Perhaps it will be the death knell.

What value is this VS fork actually adding given today's advanced harnesses? Surely whatever benefits it offers are not worth the risks going forward.

Cursor was the first AI coding tool I used that had a "wow" factor and got me to switch over from typing out most of my code to having AI write most of it. But then when I used Claude Code for the first time, I never went back to Cursor.

I can see the value in a world where you still want to be a bit more hands-on with your code, but that didn't feel worth paying for anymore. Now if I want to be hands-on I actually prefer a minimalist editor with no AI features at all, while agents run in my terminal.

Seeing as SpaceX owns Curser, I’m surprised there wasn’t a hack on SpaceX… Yet

  • Who says there wasn't?

    A lot of the most valuable SpaceX IP (at least to the big "advanced persistent threat" hackers) is probably related to military secrets, information to let you spy on/disable/control star shield/link, and so on. Not things we'd find out about as the general public.

    • It's highly probable that Russia's top state-controlled hackers have been attempting to exploit/infiltrate SpaceX and Starlink for the past four years.

      China has probably being doing so for a decade.

>Perhaps it will be the death knell

People said the same thing about SolarWinds, Lenovo (Superfish), CrowdStrike... Nothing will happen.

  • I'm still surprised people use CrowdStrike. I guess there are no real alternatives. I know companies are getting CrowdStrike alerts for this very issue, but it still just seems like a MASSIVE attack surface.

    Back when I was in DevOps, the Linux Falcon Sensor was an absolutely disaster. They recompiled it for EVERY kernel release of every supported distribution (they had never heard of DPMS apparently), the service ran as root, it UPDATED ITS OWN BINARIES as root! It broke nearly ever Linux design philosophy.

    I know newer version use eBPF and don't have the stupid kernel lock-in issue, but I still don't trust it.

    • > They recompiled it for EVERY kernel release of every supported distribution (they had never heard of DPMS apparently)

      Neither have I, I think you goofed up on your acronyms? For a driver as embedded as crowdstrike you need to recompile, there's no other way around it. Linux doesn't provide anything stable to target and a shim won't cut it in this case.

      > the service ran as root, it UPDATED ITS OWN BINARIES as root!

      Would you prefer if Linux allowed local users to replace the kernel and/or its modules without root? What kind of faux-outrage is this?

      1 reply →

    • Crowdstrike and Solarwinds are still being used by nearly every fed govt agency today. It's amazing really that despite everything they still get to suck up our funds.

    • If I had to guess it's that very few people use it for actual security guarantees and most use it just to be able to fill out the questionnaire or compliance box saying "we do this".

    • What do you suggest instead ?

      Their Linux stuff has gotten much better but besides the (insanely huge) recent windows debacle I've found them to be a great product

    • I remember when Crowdstrike was all about mobilizing your spare computer to DDOS the bad guys.

    • I had to fill a security questionnaire today. One of the questions was

      "Do you use crowdstrike falcon?"

  • I forgot entirely about superfish. That takes me back.

    My recollection is part of what uncovered it was that the malware broke WebSockets on Lenovo laptops.

    I think higher end Lenovo laptops with cleaner windows images were not affected. And a lot of knowledgeable users wipe the OS anyway.

I realized this earlier this year and dumped Cursor for just vscode along with 20x subs to Claude and OpenAI. Much cheaper and nothing of value was lost.

I believe the value add was $60bn in just 4 years https://www.linkedin.com/posts/sytaylor_wild-cursor-just-sol...

  • I dont know a single person who uses this tool (but im sure there are some) our annual subs recently ran out, I hadnt used mine in 6 months, we did not renew.

    Elon did the typical boomer tech guy thing when they interact with any slightly impressive AI tool.. Lose their fkn mind and spend tons of money on it. He just took it to another level..

    Its like those tech boomers that got obsessed with openclaw and instantly started spending 20k a month on a thing that read their calender outloud to them.