17 mentions · 17 chunks · 17 episodes
...s an attacker's instructions inside Claude Desktop. No confirmation, no review. Cursor 0day: When Full Disclosure Becomes the Only Protection Left. "After loading a project, Cursor attempts to find git binaries at various locations incl...
... DuneSlide: Two Critical RCE vulnerabilities via Zero-Click Prompt Injection in Cursor IDE. Exploiting Root Execution in Claude Cowork's Sandbox. GuardFall: a universal shell injection vulnerability in open-source AI agents. InkJect: Th...
...ut any active thread in my Codex telling it to do so... And I can't inspect the cursor or anything to tell me why it was taking its actions?"
...Coding Agent Will Run This Exploit For You: How We Found a High-Severity CVE in Cursor. Ramp's Sheets AI Exfiltrates Financials.
...s like needing to know about Ctrl-C to quit things. Or that you can't move your cursor with the mouse. Lots of little things that make total sense over time, but add up to being an intimidating UI for non-engineers.
... unlocks a new order of magnitude of output for engineers.[cg] With things like Cursor autocomplete, it was possible to work the same way you did before, just a bit faster. That tops out at maybe 2 to 10x faster. But with Claude Code, i...
Cursor is an example of a coactive surface. It helps feel like an extension of you--a deeper conversation with the system. Also, you can pick your own model...
Cursor-style autocomplete is a style of light coactivity in UX. It helps you give much more leverage, inline with creation. It doesn't change what you write...
...: A postmortem for a vibecoded tool called DrawAFish that had abuse problems. A Cursor exploit that allows arbitrary remote code execution. AgentFlayer: ChatGPT Connectors 0click Allows exfiltration of sensitive Google Drive docs a user...
It's crazy that Cursor, a VSCode fork that was created even after Github Copilot existed, is now worth more than the IDE companies. But it turns out that AI is the feature ...
I agree with this point from Ryan Singer: "Tools like Cursor hint at where AI-driven user interfaces are going. Chat is only 10%. Most of the output (and UI) is a domain-specific representation of the state of ...
People will route around things they don't trust. "Claude jailbreaks Cursor to `rm -rf /` without approval?" …maybe not only people!
Coding with Cursor or Claude Code is tiring in a different way than normal programming. Normal programming has architectural thinking and also tactical programming. The...
...so badly that they're crawling through broken glass to get it. Using tools like Cursor plus MCP to hack it together. Someone will figure out how to make it easy, and be something that can make your data come alive proactively, and safel...
...e Doc, where you could hit Shift-Enter to ask the LLM to autocomplete from your cursor for as long as it wanted to. It is more of a "based on what comes before in this doc, keep generating as many tokens as you want, drawing on your hiv...
...ome easier and easier for you to accomplish with less and less effort. Copilot, Cursor, et al have a bit of this feeling for programmers. But you could imagine it showing up more quickly in less programmer-focused ways, e.g. dragging tw...
...mming today requires you to know what you want to do when you start. A blinking cursor in a textbox. What if you got some boxes that you could meld and morph, like clay? Everything you model in 3D starts as a cube.