I read a few month ago a comment from an Anthropic or OpenAI employee saying that the security problem of prompt injection was a solved problem at this point, as the frontier models where rejecting 98% of attacks.

It tells you all you need to know about how unserious these people are about computer security.

I am afraid until 200x is achieved we are at risk...

To me this very much sounds like an attacker got access to anthropic's cursor marketplace account and uploaded a backdoored package. This reverse ssh shell was intentionally written by a malicious actor, not a security vulnerability.

It also sounds like only cursor marketplace is affected, not vscode proper.

Just put gastown on it!

On the other hand, they don't know what their models do or can do and nothing is safe ever, so ???

I really don't think the scaling is so trivial.

I get the snark but to be fair, the company has been growing like crazy. That makes it really hard to keep track of everything happening when you grow your team by 5x over a relatively short period of time

Yet, they managed to screw up.

[flagged]

[flagged]