8 ms·

I am more concerned about their, umm, gallant approach to security. Not only that OpenCode is permissive by default in what it is allowed to do, but that it app

I am more concerned about their, umm, gallant approach to security. Not only that OpenCode is permissive by default in what it is allowed to do, but that it apparently tries to pull its config from the web (provider-based URL) by default [1]. There is also this open GitHub issue [2], which I find quite concerning (worst case, it's an RCE vulnerability). [1] https://opencode.ai/docs/config/#precedence-order https://opencode.ai/docs/config/#precedence-order [2] https://github.com/anomalyco/opencode/issues/10939 https://github.com/anomalyco/opencode/issues/10939

TZubiri 7mo ago
I assign a specific user for it, which doesn't have much access to my files. So what I want is complete autonomy.
woctordho 7mo ago
RCE is exactly the feature of coding agents. I'm happy with it that I don't need to launch OpenCode with --dangerously-skip every time.
- mrln 7mo ago
  No, it is still configurable. You can specify in your opencode.json config that it should be able to run everything. I think they just argued that it shouldn't be the default. Which I agree with.
  - indigodaddy 7mo ago
    And in the webui there is a don't ask button
  - rbehrends 7mo ago
    No, the problem is that when logging in, the provider's website can provide an authentication shell command that OpenCode will send to the shell sight unseen, even if it is "rm -rf /home". This "feature" is completely unnecessary for the agent to function as an agent, or even for authentication. It's not about it being the default, it's about it being there at all and being designed that way.
    - mrln 6mo ago
      Ah, yes. That's crazy. I was thinking they were refering to the lax permissions of the agent by default.
ct520 7mo ago
I second that. Have fun on windows - automatic no from me. https://github.com/anomalyco/opencode/issues?q=is%3Aissue%20state%3Aopen%20virus https://github.com/anomalyco/opencode/issues?q=is%3Aissue%20...
- foxygen 7mo ago
  Who cares about Windows?
  - BoorishBears 7mo ago
    I do: they're important for ventilation in this heat wave.
  - Sebguer 7mo ago
    people who don't make OS preferences their entire personality
  - UltraSane 7mo ago
    People who don't like messing around with drivers and like running Linux VMs on a Windows OS.
    - shellwizard 7mo ago
      What? Drivers?
    - igravious 7mo ago
      Driver issues are way more of a thing on Windows than Linux or MacOS.
      - UltraSane 7mo ago
        Getting hardware to work is MUCH harder on Linux
        freehorse 7mo ago
iam_circuit 7mo ago
[dead]
heavyset_go 7mo ago
It also sends all of your prompts to Grok's free tier by default, and the free tier trains on your submitted information, X AI can do whatever they want with that, including building ad profiles, etc. You need to set an explicit "small model" in OpenCode to disable that.
- integralid 7mo ago
  This. I work on projects that warrant a self hosted model to ensure nothing is leaked to the cloud. Imagine my surprise when I discovered that even though the only configured model is local, all my prompts are sent to the cloud to... generate a session title. Fortunately caught during testing phase.
  - lukewarm707 7mo ago
    [dead]
  - DrewADesign 7mo ago
    I’m curious if there’s a reason you’re not just coding in a container without access to the internet, or some similar setup? If I was worried about things in my dev chain accessing any cloud service, I’d be worried about IDE plugins, libraries included in imports, etc. and probably not want internet access at all.
    - lukewarm707 7mo ago
      [dead]
    - ssrshh 7mo ago
      Having access to internet could be important for looking up docs and things like that.
      - DrewADesign 7mo ago
        Yeah — you can develop in a container that’s configured to only allow local access. Your machine is connected to the Internet as usual, so you can access any docs you want or whatever, but the actual execution environment running on your machine can’t. This is pretty easy to set up in Docker, for example. It’s also useful because you can have the same exact dev environment no matter what machine you’re on, OS you’re running, etc.
jee599 7mo ago
[flagged]

TZubiri 7mo ago

I assign a specific user for it, which doesn't have much access to my files. So what I want is complete autonomy.

woctordho 7mo ago

RCE is exactly the feature of coding agents. I'm happy with it that I don't need to launch OpenCode with --dangerously-skip every time.

mrln 7mo ago
No, it is still configurable. You can specify in your opencode.json config that it should be able to run everything. I think they just argued that it shouldn't be the default. Which I agree with.
- indigodaddy 7mo ago
  And in the webui there is a don't ask button
- rbehrends 7mo ago
  No, the problem is that when logging in, the provider's website can provide an authentication shell command that OpenCode will send to the shell sight unseen, even if it is "rm -rf /home". This "feature" is completely unnecessary for the agent to function as an agent, or even for authentication. It's not about it being the default, it's about it being there at all and being designed that way.
  - mrln 6mo ago
    Ah, yes. That's crazy. I was thinking they were refering to the lax permissions of the agent by default.

ct520 7mo ago

I second that. Have fun on windows - automatic no from me. https://github.com/anomalyco/opencode/issues?q=is%3Aissue%20state%3Aopen%20virus https://github.com/anomalyco/opencode/issues?q=is%3Aissue%20...

foxygen 7mo ago
Who cares about Windows?
- BoorishBears 7mo ago
  I do: they're important for ventilation in this heat wave.
- Sebguer 7mo ago
  people who don't make OS preferences their entire personality
- UltraSane 7mo ago
  People who don't like messing around with drivers and like running Linux VMs on a Windows OS.
  - shellwizard 7mo ago
    What? Drivers?
  - igravious 7mo ago
    Driver issues are way more of a thing on Windows than Linux or MacOS.
    - UltraSane 7mo ago
      Getting hardware to work is MUCH harder on Linux
      - freehorse 7mo ago

iam_circuit 7mo ago

[dead]

heavyset_go 7mo ago

It also sends all of your prompts to Grok's free tier by default, and the free tier trains on your submitted information, X AI can do whatever they want with that, including building ad profiles, etc. You need to set an explicit "small model" in OpenCode to disable that.

integralid 7mo ago
This. I work on projects that warrant a self hosted model to ensure nothing is leaked to the cloud. Imagine my surprise when I discovered that even though the only configured model is local, all my prompts are sent to the cloud to... generate a session title. Fortunately caught during testing phase.
- lukewarm707 7mo ago
  [dead]
- DrewADesign 7mo ago
  I’m curious if there’s a reason you’re not just coding in a container without access to the internet, or some similar setup? If I was worried about things in my dev chain accessing any cloud service, I’d be worried about IDE plugins, libraries included in imports, etc. and probably not want internet access at all.
  - lukewarm707 7mo ago
    [dead]
  - ssrshh 7mo ago
    Having access to internet could be important for looking up docs and things like that.
    - DrewADesign 7mo ago
      Yeah — you can develop in a container that’s configured to only allow local access. Your machine is connected to the Internet as usual, so you can access any docs you want or whatever, but the actual execution environment running on your machine can’t. This is pretty easy to set up in Docker, for example. It’s also useful because you can have the same exact dev environment no matter what machine you’re on, OS you’re running, etc.

jee599 7mo ago

[flagged]