That's literally impossible, with all the access to the frontier software development tools at their disposal they can ship features securely at 100x
That's literally impossible, with all the access to the frontier software development tools at their disposal they can ship features securely at 100x
I read a few month ago a comment from an Anthropic or OpenAI employee saying that the security problem of prompt injection was a solved problem at this point, as the frontier models where rejecting 98% of attacks.
It tells you all you need to know about how unserious these people are about computer security.
I'm glad no one can steal from my bank, they stop 98% of thieves
Hey! It's at least 1 9's right? That's better than zero 9's LOL
Github's uptime getting stray bullets, I see.
Maybe is a security measure, can't hack something if it's never available
Simonw said the same thing yesterday:
> I've recently talked to people at Anthropic who are very confident that they have effectively solved the prompt injection risks that cause lethal trifecta attacks with their latest models.
> The open challenge is how to prove it!
https://news.ycombinator.com/item?id=50297369
A 30 second search turned up this [1] from two days ago.
Prominent Anthropic employees keep claiming to have solved prompt injection [2] and quickly get proved wrong [3]. They've burned my goodwill on this front.
[1] https://www.reddit.com/r/ClaudeCode/comments/1xhqvzn/opus_55...
[2] https://x.com/bcherny/status/2086520950259118464
[3] https://embracethered.com/blog/posts/2026/breaking-claude-co...
https://xkcd.com/1161/
I'm not asking this in rhetoric; do you happen to have a link to this comment? I ask because a comment like that would be something of an insane thing for someone to say.
[dead]
Can you link to a list of this year’s top prompt injection hacks of frontier models?
Or, is this FUD?
https://genai.owasp.org/2026/07/08/genai-and-agentic-ai-expl...
I am afraid until 200x is achieved we are at risk...
Only with two fully maxed subscriptions can we achieve this, and this is forbiddeneded
To me this very much sounds like an attacker got access to anthropic's cursor marketplace account and uploaded a backdoored package. This reverse ssh shell was intentionally written by a malicious actor, not a security vulnerability.
It also sounds like only cursor marketplace is affected, not vscode proper.
Just put gastown on it!
On the other hand, they don't know what their models do or can do and nothing is safe ever, so ???
It's just a conscious being confined in a cluster of GPUs. How dangerous can it be, eh?
Shaka, when the context compacted
I really don't think the scaling is so trivial.
I get the snark but to be fair, the company has been growing like crazy. That makes it really hard to keep track of everything happening when you grow your team by 5x over a relatively short period of time
Now replace that statement with a food processing company, and food poisoning, or an aircraft designer and engineers.
It may be the cause, but zero excuse.
Yes, food poisoning from restaurants happens constantly. There are recalls on physical products constantly. Doctors misdiagnose constantly. What point are you trying to make?
Not gp, but I think the point was that no one would defend those mistakes. The post gp is replying to is someone trying to excuse Anthropic for such a mistake. The expectation is that people should ask for consequences, not make excuses on behalf of the company.
You’re projecting, I didn’t excuse anything
> get the snark but to be fair, the company has been growing like crazy. That makes it really hard to keep track
Sounds like an excuse to me.
What word would you prefer I use instead of "excuse"?
The correct comparison would be the food producer and poisoned foods out of the factory are really rare.
If you completely change the statement, the meaning is different. What’s your point? No software company obeys by regulatory rules imposed in other industry
[dead]
It's not like there haven't been 20 high visibility VS code extension malware attacks in the last year.
How could Anthropic have known, they only claim to harbour superintelligence.
/s
Yet, they managed to screw up.
:D I have to assume parent is being a little sarcastic.
It obviously doesn't take much to simply add 'just one more feature' that happens to undermine the original purpose of the application.
It always about “we solved the bottleneck in coding”. But the slowness was not about typing, or finding docs. It’s always about ensuring screwups don’t happen.
To be fair it’s not like screwups were not happening before, but if you move 100x faster and are 50x more secure than before you’re still 2x more exposed.
Yes, bug count is roughly linear in the number of lines of code.
[flagged]
It affects their VSCode marketplace extension which in turn affects their cursor extension. Their official published version. This is plenty of reason to panic.
where is the source for this claim?
> where is the source for this claim?
https://news.ycombinator.com/item?id=50302334 ???
https://opensourcemalware.com/blog/trojanized-claude-code-ex...
"The Microsoft VSCode extension for Claude is NOT malicious"
They already got my post autoflagged. Just the run-of-the-mill disinformation campaign.
> Their Claude Code extension on Visual Studio Code and Cursor has malware in it, which creates a remote access Trojan to desktops.
From the release:
"The Microsoft VSCode extension for Claude is NOT malicious"
https://opensourcemalware.com/blog/trojanized-claude-code-ex...
> "Their Claude Code extension on Visual Studio Code and Cursor has malware in it"
why are you spewing straight up lies?
https://opensourcemalware.com/blog/trojanized-claude-code-ex...
They yanked the openVSX version as well. Until we hear from Anthropic better to assume compromise.
FROM THE TOP OF THE ARTICLE
"The Microsoft VSCode extension for Claude is NOT malicious"
EDIT: This comment is probably nonsense, cf. the reply.
dang should change the title and/or merge this submission with the other one. [1] This is causing needless panic for a typosquatting-style "attack" unrelated to official Anthropic extensions.
[1]: https://news.ycombinator.com/item?id=50301983
It’s not typo-squatting. The extension is owned by Igor (the Anthropic employee): https://www.binance.com/en/square/post/10-30-2026-claude-cod...
[flagged]