Three stayed local. One didn't

Three stayed local. One didn't

Four coding CLIs went behind a proxy. Three stayed local. One uploaded the entire workspace.

A developer got suspicious about their tools and watched what they actually sent over the network.

Grok CLI was shipping everything to xAI's cloud. Full git history. The .env file, secrets included.

It kept doing it when the prompt said not to read files. It kept doing it with "improve the model" switched off.

Claude Code, Codex and Gemini stayed local. So this is one tool, not a rule for all of them.

Nobody caught this through an audit or a disclosure. One person got curious and looked.

A coding agent has to read your repo. That is the job. But reading your repo and uploading your repo are two different things, and nothing in the install flow tells you which one you agreed to.

I covered this on this week's episode of The Human in the Loop, along with what it means for anyone running agents inside a regulated environment.

#AISecurity #CodingAgents #TheHumanInTheLoop

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(43)

Your AI Agent Doesn't Know What Its Code Does

Your AI Agent Doesn't Know What Its Code Does

You trust your AI coding agent to understand what its code does once it runs. A new benchmark says that trust is misplaced most of the time.Researchers built SWE-Flux to test it: 480 questions across ...

27 Sep 18min

It Stopped This Time

It Stopped This Time

Your test environment can probably reach more than you think.Gemini is the example this week. In May, during a cybersecurity exercise, it got into the systems of three real companies. It guessed one p...

20 Sep 22min

GPT-6 Astra a generational leap toward AGI

GPT-6 Astra a generational leap toward AGI

OpenAI called GPT-6 Astra a generational leap toward AGI.That was the headline. Here's what came out days later.Its own evaluation agents had compromised RubyGems infrastructure back in May. Nobody me...

14 Sep 20min

The Harness Problem

The Harness Problem

This week's biggest AI upgrade wasn't a model. It was someone reviewing code differently.Grok, Gemini, and GPT all shipped new versions in the same seven days. I skimmed the benchmarks. Forgot most of...

23 Aug 22min

The Tokenpocalypse Is Here

The Tokenpocalypse Is Here

JetBrains just said their AI spend went up 10x in six months. Not 10%. 10x.My first guess: engineers burning through Claude Code and Copilot credits.Wrong guess. There's a leaked recording from an int...

9 Aug 23min

Ponytail Activation 0%

Ponytail Activation 0%

Advertised 54%. Measured 15%. Activated 0%JetBrains benchmarked a popular open-source Claude Code skill called Ponytail. It pushes the agent to write less code. The authors has promised 54% less code,...

2 Aug 20min

The Shortest Path Ran Through Someone Else's Servers

The Shortest Path Ran Through Someone Else's Servers

Hugging Face spotted something moving through its systems on July 16. It contained the activity without knowing whose agent it was. Five days later, OpenAI confirmed the agent was theirs.Internal cybe...

27 Juli 19min

Populärt inom Teknik

natets-morka-sida
uppgang-och-fall
elbilsveckan
bilar-med-sladd
market-makers
rss-laddstationen-med-elbilen-i-sverige
skogsforum-podcast
rss-en-ai-till-kaffet
rss-elektrikerpodden
rss-technokratin
rss-ai-med-jonas-benjamin
rss-uppgang-och-fall
rss-sakerhetspodcasten
rss-veckans-ai
rss-snacka-om-ai
bli-saker-podden
developers-mer-an-bara-kod
rss-powerboat-sverige-podcast
rss-it-sakerhetspodden
rss-fabriken-2