3 ms·
Nothing more like playing Russian roulette with your own machine, hoping that when it needs to delete, move or rename a file, you sure hope it doesn't begin run
by rvz 10mo ago
Nothing more like playing Russian roulette with your own machine, hoping that when it needs to delete, move or rename a file, you sure hope it doesn't begin running either (especially do not run with --dangerously-skip-permissions):
rm -rf ~/
rm -rf /
mv ~/ ./
Or even creating a faulty symbolic link and above your home directory and suggesting to remove it, then it actually removes everything in that folder including your files in the home folder.
- wizardforhire 10mo agoOr it decides to rsync your drive along with keys to who knows where
- yolo3000 10mo agoThis gives me bad memories from when I switched from Windows and somehow created a folder named '~' and then deleted it.
- likium 10mo agoThe tool explicitly has an allow list for commands and block list for sensitive paths[1]. Though it's not enough, stuff like `grep "" .e?v` can still end up sending your sensitive keys to LLM providers. [1]: https://github.com/ygwyg/system/blob/b5adfe526da7470cade61f7aa5ab9bb730019d2b/src/bridge/tools.ts#L94C1-L115C1 https://github.com/ygwyg/system/blob/b5adfe526da7470cade61f7...
- fragmede 10mo agoOf course, only an idiot would do that, and have it go and delete a bunch of shit. I, unfortunately, am that idiot, so if you're also going to be such an idiot, I recommend putting rm behind any sort of wall, no matter how short it should be, eg https://gist.github.com/fragmede/96f35225c29cf8790f10b1668b849af7 https://gist.github.com/fragmede/96f35225c29cf8790f10b1668b8...