A new tool that's really good at written language is being used by folks to edit copy. And the unsavory are using it to externalize costs and monetize slop. All this seems to distract everyone from the big issues like ownership and mass surveillance.

"It can be presumed that no person would reasonably make REST requests manually."
It's only you presuming people aren't smart and don't know how the web works. Literally billions of people are running REST requests without a browser these days. Your low ID and ignorance tells me you're one of those old people who haven't kept up with technology. Go away and let the rest of us build the world.

This is the AI agent bypassing the "mouse and keyboard" and doing the REST work manually. Things like changing the date range in the URL and submitting forms that haven't been validated by javascript. I could accept the site was "hacked" but no crime or cyber attack was committed.

"AI-generated art doesn't receive copyrights" is an oversimplification with minimal legal precedent.

I may not agree with the rest of what you said, but this sums up AI etiquette nicely. Don't inflict your AI upon others. I don't want to read the AI's answer to a question I asked YOU! I especially don't want to do the code review and cleanup you thought was unnecessary.

It's ok to use AI to make your life easier, but never to make other peoples lives harder.

Who? Zuck and his sycophants? Won't help. Another piece of scum will float to the top.

"AI only finds simple to find bugs" is ignorance.

People have been saying the same things for many millennia about every new technology. History disagrees with your predictions.

Lots of folks are "empowered and amplified" but most don't go around debating with the shitbirds shitposting about how AI=bad. They are too busy working hard and creating. The finance side of AI is unquestionably bad, but the tech works and doesn't have any of the downsides the now unemployable constantly lament about.

This exploit targets IDEs, not AI. It's essentially the same old "autorun.inf" exploit from Windows 95 but updated for IDEs. You'll get infected with plain VS Code and no AI use at all. It also requires your system already be infected with node.js.

Companies wouldn't need massive compliance teams if they didn't pursue every single dark pattern they come across. This is like burglars complaining they need lookouts after being caught too many times.

That's the correct solution if you don't want people to find your stuff. Other folks are thinking bigger than you. Your comment adds nothing of value here because it's literally addressed in the summary: "...rather than each operator improvising its own survival plan in isolation."

Excel isn't open source. I know it's tradition to not read the article, and some people don't even read the summary, but now we're not even reading the headline?

Web development with a framework already has the problem constrained. You have to learn how to constrain the AI yourself when doing embedded or systems programming. It took me hundreds of hours and hundreds of dollars to get the hang of it.

I use it daily on embedded an unusual platforms. Works great if the docs are good.