Re:Code highlighting with Cursor AI used for $500k theft
by xinayder on Tuesday July 15, 2025 @08:24AM
(#44570409)
Do you use devcontainers or a custom-built solution? Would you mind sharing how you do your dev work using containers? I've been looking to try it out, and this attack might be the tipping point to where I actually do that.
[ Parent
| on HN ]
Re:Code highlighting with Cursor AI used for $500k theft
by christophilus on Tuesday July 15, 2025 @11:05AM
(#44571903)
Custom. I have a little script: “dev sh” which creates a new container for whatever folder I’m in. The container has full access to that folder, but nothing else. If there’s a .podman/env file, the script uses that to configure things like ports, etc.
From what I saw of devcontainers, they basically grant access to your entire system (.ssh, etc). May be wrong. That’s my recollection, though.