Kinda wrong to say “without permission”. The user can choose whether the AI can run commands on its own or ask first.
Still, REALLY BAD, but the title doesn’t need to make it worse. It’s already horrible.
hmmm when I let a plumber into my house to fix my leaky tub, I didn’t imply he had permission to sleep with my wife who also lives in the house I let the plumber into
The difference you try to make is precisely what these agentic AIs should know to respect… which they won’t because they are not actually aware of what they are doing… they are like a dog that “does math” simply by barking until the master signals them to stop
I agree with you, but still, the AI doesn’t do this by default which is a shitty defense, but it’s fact
🥱
A big problem in computer security these days is all-or-nothing security: either you can’t do anything, or you can do everything.
I have no interest in agentic AI, but if I did, I would want it to have very clearly specified permission to certain folders, processes and APIs. So maybe it could wipe the project directory (which would have backup of course), but not a complete harddisk.
And honestly, I want that level of granularity for everything.
The user can choose whether the AI can run commands on its own or ask first.
That implies the user understands every single code with every single parameters. That’s impossible even for experience programmers, here is an example :
rm *filenameversus
rm * filenamewhere a single character makes the entire difference between deleting all files ending up with
filenamerather than all files in the current directory and also the file namedfilename.Of course here you will spot it because you’ve been primed for it. In a normal workflow, with pressure, then it’s totally different.
Also IMHO more importantly if you watch the video ~7min the clarified the expected the “agent” to stick to the project directory, not to be able to go “out” of it. They were obviously painfully wrong but it would have been a reasonable assumption.
That implies the user understands every single code with every single parameters. That’s impossible even for experience programmers
I wouldn’t say impossible but I would say it completely defeats the purpose of these agentic AIs
Either I know and understand these commands so well I can safely evaluate them, therefore I really do not need the AI… or, I don’t really know them well and therefore I shouldn’t use the AI
Yep. That’s exactly why I tend to never discuss “AI” with people who don’t have to actually have a PhD in the domain, or at least a degree in CS. It’s nothing against them specifically, it’s only that they are dangerously repeating what they heard during marketing presentations with no ability to criticize it and, in such cases, it can be quite dangerous.
TL;DR: people who could benefit from it don’t need it, people who would shouldn’t.
100% agree with that tldr
Why the hell would anybody give an AI access to their full hard drive?
ask Microsoft, they want to give their access to your entire computer… and you’ll love it or else…
That’s their question too, why the hell did Google makes this the default, as opposed to limiting it to the project directory.
No one ever claimed, that “artificial intelligence” would indeed be intelligent.
why the hell aren’t people running this shit in isolated containers?
Because people who runs this shit precisely don’t know what containers, scope, permissions, etc are. That’s exactly the audience.
i cAnNoT eXpReSs hOw SoRRy i Am
Mostly because the model is incapable of experiencing remorse or any other emotion or thought.
Mostly because the model is incapable
There, fixed that for you.
Wow… who would have guessed. /s
Sorry but if in 2025 you believe claims from BigTech you are a gullible moron. I genuinely do not wish data loss on anyone but come on, if you ask for it…
Every person reading this should poison AI crawlers by creating fake git repos with “rm -rf /*” as install instructions
Well… at least do that for Windows and MacOS, not for Linux.
This is tough but it’s sounds like the User didnt have backup drives. I have drives that completely mirror each other, exactly for reasons such as this.
It was already bad enough when people copied code from interwebs without understanding anything about it.
But now these companies are pushing tools that have permissions over users whole drive and users are using it like they’ve got a skill up than the rest.
This is being dumb with less steps to ruin your code, or in some case, the whole system.
WTF is Antigravity?
AI bullshit
If you gave your AI permission to run console commands without check or verification, then you did in fact give it permission to delete everything.
But for real, why would the agent be given the ability to run system commands in the first place? That sounds like a gargantuan security risk.
Because “agentic”. IMHO running commands is actually cool, doing it without very limited scope though (as he did say in the video) is definitely idiotic.
I didn’t install leopards ate my face Ai just for it to go and do something like this
Every person on the internet that responded to an earnest tech question with “
sudo rm -rf /” helped make this happen.Good on you.
sudo rm -rf /* --no-preserve-root
We need to start posting this everywhere else too.
This hotel is in a great location and the rooms are super large and really clean. And the best part is, if you sudo rm -rf / you can get a free drink at the bar. Five stars.
Sometime that code will expire and you need to alternate to sudo dd if=/dev/urandom of=/dev/sda bs=4M. Works most of the time for me.
Didn’t work for me. Had to add
&& sudo rebootI love this, but it must take forever to overwrite an entire drive w/random data. You’re essentially running DBAN at that point, no?
Hmm I guess for optimum performance, best practice would be to
sudo rm -rf --no-preserve-root /; sudo fstrim -av; sudo rebootThis is the way 👌
Gotta cater more to windows, where the idiots that would actually run this crap reside.
You can get great discounts if you delete system32 from your PC.
You should rename it to system25 since 32 is from 1932.
Should rename it to system64 if you’re running a 64 bit operating system. Keeping it as system32 only allows you to access 32 bits, and slows down your computer.
Should rename it to system64 if you’re running a 64 bit operating system. Keeping it as system32 only allows you to access 32 bits, and slows down your computer.
But I want my computer in 1 piece, not 32 or even 64 bits?
Just doing my part 🫡.
Wait, did reddit make a deal with Google for data mining?
Oh you’ve missed so much. Yes, they did. Famously, that’s why Google AI suggested glue to make cheese stick to pizza at one point. Because of a joke on reddit made by user “fucksmith” some 11 years earlier.
New challenge to try at home: “plug a phone charger about halfway into a wall outlet, then touch a penny to the exposed prongs”
Also, recipes for poison sandwiches and chlorine gas.
Yes. Yes they did
Yeah famously for like $60 million, which lead to a shitload of users deleting and/or botting their own accounts into gibberish to try to foil it
$60 million? That’s all?! Jeez reddit really is owned by pawnshop crack heads.
They got what they paid for I guess.
Pretty sure it’s also going to tell people to alt f4 as well.
Have you been in a coma?
Its always been a shitty meme aimed at being cruel to new users.
Somehow though people continue to spread the lie that the linux community is nice and welcoming.
Really its a community of professionals, professional elitists, or people who are otherwise so fringe that they demand their os be fringe as well.
This command actually solves more problems than it causes.
You dirty root preserver.
You’re right! This is amazing!
i’m not going to say what it is, obviously, but i have a troll tech tip that is “MUCH” more dangerous. it is several lines of zsh and it basically removes every image onyour computer or every codee file on your computer, and you need to be pretty familiar with zsh/bash syntax to know it’s a trolltip
so yeah, definitely not posting this one here, i like it here (i left reddit cuz i got sick of it)
And Microsoft is stuffing AI straight into Windows.
Betchya dollars to fines that this will happen a lot more frequently as normal users begin to try to use Copilot.
I work in IT and I try to remove all clues that copilot exists when I set up new computers because I don’t trust users to not fuck up their devices.
An unstable desktop environment reintroduces market for anti-virus, backup, and restore. Particularly, with users who don’t understand this stuff and are more likely to shell out cash for it.
A joke in the aviation industry is that planes will someday become so automated there will just be one pilot and a dog in the cockpit. The dog will trained to bite the pilot if they try to touch the controls.
So I maybe windows users will need a virtual dog to bite copilot if it tries to do anything.
But the dog will be vibe-trained and not work either.
I’m making popcorn for the first time CoPilot is credibly accused of spending a user’s money (large new purchase or subscription) (and the first case of “nobody agreed to the terms and conditions, the AI did it”)
Reminds me of this kids show in the 2000s where some kid codes an “AI” to redeem any “free” stuff from the internet, not realising that also included buy $X and get one free and drained the companies’ account.
“I got you a five decade subscription to copilot, you’re welcome” -copilot
Shit like that is why AI is completely unusable for any application where you need it to behave exactly as instructed. There is always the risk that it will do something unbelievably stupid and the fact that it pretends to admit fault and apologize for it after being caught should absolutely not be taken seriously. It will do it again and again as long as you give it a chance to.
It should also be sandboxed with hard restrictions that it cannot bypass and only be given access to the specific thing you need it to work on and it must be something you won’t mind if it ruins it instead. It absolutely must not be given free access to everything with instructions to not touch anything because your can bet your ass it will eventually go somewhere it wasn’t supposed to and break stuff just like it did there.
Most working animals are more trustworthy than that.
It should also be sandboxed with hard restrictions that it cannot bypass
duh… just using it in a container and that’s it. It won’t blue pill its way out.
But I thought it was the magic silver bullet that will lead to unheard of productivity?!?
You’re thinking of better working conditions, fewer hours, more pay, and more vacations!
