4 ms·

Does that version of Codex still read sensitive data on your file system without even asking? Just curious. https://github.com/openai/codex/issues/2847 https:/

• trueno 6mo ago
  ran into this literally yesterday. so im gonna assume yes.
• ethan_smith 6mo ago
  This is a pretty important issue given that the new update adds "computer use" capabilities. If it was already reading sensitive files in the CLI version, giving it full desktop control seems like it needs a much more robust permission model than what they've shown so far.
• andai 6mo ago
  https://www.reddit.com/r/ClaudeAI/comments/1r186gl/my_agent_stole_my_api_keys/ https://www.reddit.com/r/ClaudeAI/comments/1r186gl/my_agent_... tldr Claude pwned user then berated users poor security. (Bonus: the automod, who is also Claude, rubbed salt on the wound!) I think the only sensible way to run this stuff is on a separate machine which does not have sensitive things on it.
  • baq 6mo ago
    'it's your fault you asked for the most efficient paperclip factory, Dave'
• p_stuart82 6mo ago
  the awkward part isn't just about reading sensitive files. search, listings, direct reads, browser and computer use all sit behind different boundaries. hard to tell what any given approval actually buys or exposes.