Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

We as a computing populace are getting more and more comfortable with footguns.


I have to agree, this to me seems like a great in theory but questionable in practice.

We know how much damage a cli can do, they often don't have the protections in place most other systems. I mean if I copy files with AWS s3 there is zero confirmation that I am not overriding files.

Personally I feel like if you really want to use an LLM to generate your commands, the extra step of copying it from a website is probably a good one. At least you will be forced to actually look at it instead of just assume it is right and hit enter.

The example given in the document is a simple one, but with more complex CLI calls I would be scared to use this for anything but the simplest of things.

That is ignoring the questionable decision to possibly send very sensitive information to ChatGPT to generate these commands.


Most people are pretty comfortable copying and pasting arbitrary commands they find on google and don't understand into the terminal, so I'm not convinced this is any worse.


You imply this is a footgun. How so?

How is this different than looking up a random webpage with the same information?


I mean...

This:

curl google.com/?search=remove+directory+linux&feeling_lucky=1 | html_strip | head -n 1 | bash

Is pretty dangerous, all things being equal, much more dangerous than copying and pasting and of course everything is more dangerous if you avoid engaging your brain entirely.


It appears from the screenshots that this tool shows you the command it will run, with some explanation of what it does, and the command options used, and then confirms you want to run the command. That is very different than the curl command you suggested is equivalent.


    suggest.mode: The mode to use for suggesting commands. Supported values: "clipboard" (copying command to clipboard), "unsafe-execution" (executing in the current shell session) (default: "unsafe-execution") 

So default mode seems to be shoot first, ask questions later.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: