2026-03-05 20:22 UTC
@dandylyons@iosdev.space @cwebber@social.coop it is about an attack based on covertly deploying LLM development tools, with the possible intent of later using them to leverage a second stage attack. If the LLM development tools were already installed, installing openclaw would not have been necessary and the attack could have worked a different way. We are discussing a situation where *the developer of a piece of software I use merely having LLM tools on their computer represents a risk to me*
Replies (2)
-
@cwebber@social.coop 2026-03-05 20:24
@mcc@mastodon.social exactly put @dandylyons@iosdev.space
-
@mcc@mastodon.social 2026-03-05 20:24
@dandylyons@iosdev.space @cwebber@social.coop in other words, if Christine's analysis holds, llm development tools create so much downstream risk to your users that *a malicious party would try to covertly install llm development tools for later exploitation*. That is the subject of discussion. Whether it is safe to install these things *at all*.