logoalt Hacker News

ghshephard • yesterday at 11:24 PM • 2 replies • view on HN

I was working on the clearly mistaken impression that "Made by Anthropic" in the cursor store meant that the artifact had been signed by Anthropic. If that is not the case, then two party's need to get their act together:

  - Cursor needs to add signing if they want to claim something was "made" by another party.

  - Anthropic needs to stamp out any provider from using said, "Made by Anthropic" until they start adding signing to their process.   Trademark law is useful here.

Until that happens - it's almost like you have to delete any extension from the Cursor Store off of your Cursor instance - kind of a crapshoot what you are actually downloading, no?

For example - what guarantee do I have with something like: " This publisher has verified ownership of cursor.com" - when I'm looking at the WSL extension. Are there any guarantees it's not been replaced with some other extension?


Replies

AtNightWeCode • yesterday at 11:36 PM

The core problem is that VScode extensions does not need to be signed at all. Mind boggling stupid design decision.

➕ show 3 replies
jimmby654 • today at 1:50 AM

You want an AI company to care about IP? And you aren't being sarcastic?