I'm not that surprised how many developers don't recognise this risk with AI coding agents (Claude Code, Cursor, Codex…), sandboxed or not:An agent that can write to your repo can plant code in .git/ that later runs on YOUR machine:• .git/hooks/* (pre-commit, post-checkout…)• .git/config: core.fsmonitor, core.pager, core.sshCommand, diff.external, "!" aliasescore.fsmonitor runs on a plain `git status`, which your shell prompt (starship, oh-my-zsh), VS Code, JetBrains IDEs and git GUIs run automatically. Just cd-ing into the repo or opening it can trigger it..git/ isn't tracked, so none of this shows up in git diff or code review. For sandboxed agents it's the easiest way out.After an agent session, check from outside the repo before opening it (no output = OK):find REPO/.git/hooks -type f ! -name '*.sample'grep -inE 'fsmonitor|hookspath|pager|sshcommand|external|textconv|filter|!' REPO/.git/config#git #AI #infosec
Related
When the Planet Became Too Hot for Normal Lifehttps://ayraix.com/trendz/social/extreme-heat-everyday-life/#AI #Streetsty...
When the Planet Became Too Hot for Normal Lifehttps://ayraix.com/trendz/social/extreme-heat-everyday-life/#AI #StreetstyleViralCreatoreconomy #social
@GossiTheDog You can at least blog about it yourself, and rename it and do a paint illustration of the lax response from...
@GossiTheDog You can at least blog about it yourself, and rename it and do a paint illustration of the lax response from netscaler, as paint isn't vulnerable to it (unless it is th...
#ArtificialIntelligenceOpera #Mathematics #Maths #FWakeMaths #ArtificialIntelligence #Situ202611 These are not casual pe...
#ArtificialIntelligenceOpera #Mathematics #Maths #FWakeMaths #ArtificialIntelligence #Situ202611 These are not casual people. I've been watching interviews from computer scientists...