Comment by IshKebab

15 hours ago

That's nonsense. If what felixrieseberg said is true this is very clearly a compromise of Cursor and not Anthropic. Trying to spin it as a compromise of Anthropic is absurd.

I don't think they're trying to spin this as Anthropic being compromised, but I do think they're correct in saying this is Anthropic's problem to deal with now, regardless of the fact that they're not responsible for the root cause.

  • It’s like if 5,000 people bought iPhones at Costco and they all exploded, and Apple says “well we didn’t sell them.” Sure, but maybe not the perfect thing to communicate immediately.

    • No, it's like 5,000 people bought something that Costco called the iPhone but really was EvilPhone Max+ by EvilCorp. Costco should be on the hook for accepting the phones without properly checking they weren't bombs in disguise.

      Apple would be 100% right to say "they're not our phone, we didn't make them, the branding was a lie."

      Of course if Cursor actually has a direct connection with Anthropic, and Anthropic lost control of their keys... it's a different story and their employee is just obfuscating up there.

      2 replies →

    • It's literally not like that at all.

      If Costco made iPhones under license from Apple outside of the Apple supply chain and they all exploded, while the Apple name is involved they have no direct liability or responsibility.

      1 reply →

If you decided to use an umbrella to protect something during a hurricane and umbrella breaks and your thing is ruined. Whose fault is that?

Distributing signed artifacts is a solved problem (until NP=P is cracked at least).

That is not what was written; what was described was anthropic losing control over their cursor account - perhaps a key compromise, developer laptop compromise, or a fault in cursor, but of the three, the language suggests the first two.