Hacker News Reader

Comment by eviks | Hacker News Reader

That's literally impossible, with all the access to the frontier software development tools at their disposal they can ship features securely at 100x

View on HN

I read a few month ago a comment from an Anthropic or OpenAI employee saying that the security problem of prompt injection was a solved problem at this point, as the frontier models where rejecting 98% of attacks.

It tells you all you need to know about how unserious these people are about computer security.

I'm glad no one can steal from my bank, they stop 98% of thieves

Hey! It's at least 1 9's right? That's better than zero 9's LOL

Github's uptime getting stray bullets, I see.

Maybe is a security measure, can't hack something if it's never available

Can you link to a list of this year’s top prompt injection hacks of frontier models?

Or, is this FUD?

https://genai.owasp.org/2026/07/08/genai-and-agentic-ai-expl...

I'm not asking this in rhetoric; do you happen to have a link to this comment? I ask because a comment like that would be something of an insane thing for someone to say.

Simonw said the same thing yesterday:

> I've recently talked to people at Anthropic who are very confident that they have effectively solved the prompt injection risks that cause lethal trifecta attacks with their latest models.

> The open challenge is how to prove it!

https://news.ycombinator.com/item?id=50297369

A 30 second search turned up this [1] from two days ago.

Prominent Anthropic employees keep claiming to have solved prompt injection [2] and quickly get proved wrong [3]. They've burned my goodwill on this front.

[1] https://www.reddit.com/r/ClaudeCode/comments/1xhqvzn/opus_55...

[2] https://x.com/bcherny/status/2086520950259118464

[3] https://embracethered.com/blog/posts/2026/breaking-claude-co...

https://xkcd.com/1161/

I am afraid until 200x is achieved we are at risk...

Only with two fully maxed subscriptions can we achieve this, and this is forbiddeneded

To me this very much sounds like an attacker got access to anthropic's cursor marketplace account and uploaded a backdoored package. This reverse ssh shell was intentionally written by a malicious actor, not a security vulnerability.

It also sounds like only cursor marketplace is affected, not vscode proper.

Just put gastown on it!

On the other hand, they don't know what their models do or can do and nothing is safe ever, so ???

It's just a conscious being confined in a cluster of GPUs. How dangerous can it be, eh?

Shaka, when the context compacted

I get the snark but to be fair, the company has been growing like crazy. That makes it really hard to keep track of everything happening when you grow your team by 5x over a relatively short period of time

It's not like there haven't been 20 high visibility VS code extension malware attacks in the last year.

How could Anthropic have known, they only claim to harbour superintelligence.

Now replace that statement with a food processing company, and food poisoning, or an aircraft designer and engineers.

It may be the cause, but zero excuse.

Yes, food poisoning from restaurants happens constantly. There are recalls on physical products constantly. Doctors misdiagnose constantly. What point are you trying to make?

The correct comparison would be the food producer and poisoned foods out of the factory are really rare.

Not gp, but I think the point was that no one would defend those mistakes. The post gp is replying to is someone trying to excuse Anthropic for such a mistake. The expectation is that people should ask for consequences, not make excuses on behalf of the company.

You’re projecting, I didn’t excuse anything

What word would you prefer I use instead of "excuse"?

> get the snark but to be fair, the company has been growing like crazy. That makes it really hard to keep track

Sounds like an excuse to me.

If you completely change the statement, the meaning is different. What’s your point? No software company obeys by regulatory rules imposed in other industry

I really don't think the scaling is so trivial.

Yet, they managed to screw up.

:D I have to assume parent is being a little sarcastic.

It obviously doesn't take much to simply add 'just one more feature' that happens to undermine the original purpose of the application.

It always about “we solved the bottleneck in coding”. But the slowness was not about typing, or finding docs. It’s always about ensuring screwups don’t happen.

To be fair it’s not like screwups were not happening before, but if you move 100x faster and are 50x more secure than before you’re still 2x more exposed.

Yes, bug count is roughly linear in the number of lines of code.

[flagged]

Reply on news.ycombinator.com