4 ms·

> You will need to provide an OpenAI API key since GPT costs money to use. Basically there's no "AI feature" enabled by default then, right? What are all these

> You will need to provide an OpenAI API key since GPT costs money to use. Basically there's no "AI feature" enabled by default then, right? What are all these people talking about in the issue then? I am so confused.

deleted 2y ago
[deleted]
spartanatreyu 2y ago
A big problem for a lot of devs is that even with an invalid API key, iTerm2 is still sending everything that happens in the terminal to OpenAI. Which begs the question: what happens when any key (even an invalid one) gets added to iTerm for any reason (e.g. dark pattern, settings export/import, buggy update, accident, forgetting to remove an old key, a sentinel message saying: "do not use AI in this department", etc...). Besides that there's other issues, - What happens if the training data is poisoned to compromise developers machines with a `curl ... | sh`? - What about developers who can no longer use the tool due to policies/regulations that rule out products with LLM features, or a feature that has the potential to send data to a third party? - What happens if the LLM hallucinates an env variable's value/existence and what should be a simple `rm -rf $BUILD/` turns into `rm -rf /` when $BUILD is not defined? I'm sure there's more concerns too.
- ehPReth 2y ago
  is it? I thought you had to specifically invoke and prompt something? not just it sending everything carte blanche?
- lurkersince2013 2y ago
  | "A big problem for a lot of devs is that even with an invalid API key, iTerm2 is still sending everything that happens in the terminal to OpenAI." ...uh why on earth would it be doing this? Do you have any evidence this behavior is happening? OpenAI integration is disabled by default, you have to actively enable it before it will send anything to OpenAI's servers.
- StrLght 2y ago
  > <...> even with an invalid API key, iTerm2 is still sending everything that happens in the terminal to OpenAI. Could you please point me to the code (or provide any other proof that this is happening)? This seems either insane or like a huge bug, so I have a hard time taking anyone's word for it.

deleted 2y ago

[deleted]

spartanatreyu 2y ago

A big problem for a lot of devs is that even with an invalid API key, iTerm2 is still sending everything that happens in the terminal to OpenAI. Which begs the question: what happens when any key (even an invalid one) gets added to iTerm for any reason (e.g. dark pattern, settings export/import, buggy update, accident, forgetting to remove an old key, a sentinel message saying: "do not use AI in this department", etc...). Besides that there's other issues, - What happens if the training data is poisoned to compromise developers machines with a `curl ... | sh`? - What about developers who can no longer use the tool due to policies/regulations that rule out products with LLM features, or a feature that has the potential to send data to a third party? - What happens if the LLM hallucinates an env variable's value/existence and what should be a simple `rm -rf $BUILD/` turns into `rm -rf /` when $BUILD is not defined? I'm sure there's more concerns too.

ehPReth 2y ago
is it? I thought you had to specifically invoke and prompt something? not just it sending everything carte blanche?
lurkersince2013 2y ago
| "A big problem for a lot of devs is that even with an invalid API key, iTerm2 is still sending everything that happens in the terminal to OpenAI." ...uh why on earth would it be doing this? Do you have any evidence this behavior is happening? OpenAI integration is disabled by default, you have to actively enable it before it will send anything to OpenAI's servers.
StrLght 2y ago
> <...> even with an invalid API key, iTerm2 is still sending everything that happens in the terminal to OpenAI. Could you please point me to the code (or provide any other proof that this is happening)? This seems either insane or like a huge bug, so I have a hard time taking anyone's word for it.