2026-03-05 20:10 UTC
@mcc@mastodon.social @cwebber@social.coop The original post was all about an LLM taking non-deterministic shell level actions at runtime. And you conflated that with deterministic code written by an LLM.
What I wrote is very relevant.
Replies (1)
-
@mcc@mastodon.social 2026-03-05 20:22
@dandylyons@iosdev.space @cwebber@social.coop it is about an attack based on covertly deploying LLM development tools, with the possible intent of later using them to leverage a second stage attack. If the LLM development tools were already installed, installing openclaw would not have been necessary and the attack could have worked a different way. We are discussing a situation where *the developer of a piece of software I use merely having LLM tools on their computer represents a risk to me*