We need to ask how it is that a compromise of the plugin marketplace could have resulted in distribution of a plugin not signed by the original creators of the plugin. This is common sense stuff. If you install a plugin with one signing key, it should not be possible to "upgrade" without same sig.

Show Post

Not surprising after seeing what passes for sandboxes and firewalls in their world. It is their turn to make everything old in computers new again: the NPM debacle of 2016, the Windows security debacle of 1997-2003 and, if they keep going, the 1983 video game crash.

Show Post

Anthropic's and Cursor's explanation only makes sense if Cursor was grossly negligent in how they implemented automatic updating and code signing. That is the only way that Anthropic could be not compromised while a fraudulent package was published in their name on the marketplace.

Show Post

pls.,,,. give me sunshin,.,, i beg

Show Post

It's quite terrible that you have all of your money sitting in your own bank account when it could be maximally utilized in my bank account.

Show Post