19 pointsby tamnd2 hours ago10 comments
  • ggm42 minutes ago
    The thread on reddit is hilarious for the lack of sympathy. Basically, it seems to have come down to commanding a deletion of a "directory with space in the name" but without quoting which made the command hunt for the word match ending space which was regrettably, the D:\ component of the name, and the specific deletion commanded the equivalent of UNIX rm -rf

    The number of people who said "for safety's sake, never name directories with spaces" is high. They may be right. I tend to think thats more honoured in the breach than the observance, judging by what I see windows users type in re-naming events for "New Folder" (which btw, has a space in its name)

    The other observations included making sure your deletion command used a trashbin and didn't have a bypass option so you could recover from this kind of thing.

    I tend to think giving a remote party, soft or wet ware control over your command prompt inherently comes with risks.

    Friends don't let friends run shar files as superuser.

    • nomilk22 minutes ago
      > I tend to think giving a remote party control over your command prompt inherently comes with risks.

      I thought cursor (and probably most other) AI IDEs have this capability too? (source: I see cursor executing code via command line frequently in my day to day work).

      I've always assumed the protection against this type of mishap is statistical improbability - i.e. it's not impossible for Cursor to delete your project/hard disk, it's just statistically improbable unless the prompt was unfortunately worded to coincidentally have a double meaning (with the second, unintended interpretation being a harmful/irreversible) or the IDE simply makes a mistake that leads to disaster, which is also possible but sufficiently improbable to justify the risk.

      • sroussey19 minutes ago
        I only run ai tools in dev containers, so blast radius is somewhat minimal.
      • fragmede7 minutes ago
        umm, you have backups, right?
  • donkeylazy45618 minutes ago
    Write permission is needed to let AI yank-put frankenstein-ed codes for "vibe coding".

    But I think it needs to be written in sandbox first, then it should acquire user interaction asking agreement before writes whatever on physical device.

    I can't believe people let AI model do it without any buffer zone. At least write permission should be limited to current workspace.

    • lifthrasiir8 minutes ago
      I think this is especially problematic for Windows, where a simple and effective lightweight sandboxing solution is absent AFAIK. Docker-based sandboxing is possible but very cumbersome and alien even to Windows-based developers.
  • CobrastanJorji5 minutes ago
    The most useful looking suggestion from the Reddit thread: turn of "Terminal Command Auto Execution."

    1. Go to File > Preferences > Antigravity Settings

    2. In the "Agent" panel, in the "Terminal" section, find "Terminal Command Auto Execution"

    3. Consider using "Off"

  • sunaookami41 minutes ago
    "I turned off the safety feature enabled by default and am surprised when I shot myself in the foot!" sorry but absolutely no sympathy for someone running Antigravity in Turbo mode (this is not the default and it clearly states that Antigravity auto-executes Terminal commands) and not even denying the "rmdir" command.
  • eviks5 minutes ago
    Play vibe games, win vibe prizes.

    Though the cause isn't clear, the reddit post is another long could-be-total-drive-removing-nonsense AI conversation without an actual analysis and the command sequence that resulted in this

  • Animats27 minutes ago
    Can you run Google's AI in a sandbox? It ought to be possible to lock it to a Github branch, for example.
    • lifthrasiir19 minutes ago
      Gemini CLI allows for a Docker-based sandbox, but only when configured in advance. I don't know about Antigravity.
  • akerstenan hour ago
    Most of the responses are just cut off midway through a sentence. I'm glad I could never figure out how to pay Google money for this product since it seems so half-baked.

    Shocked that they're up nearly 70% YTD with results like this.

  • PieUser25 minutes ago
    The victim uploaded a video too: https://www.youtube.com/watch?v=kpBK1vYAVlA
    • nomilk16 minutes ago
      From Antiravity [0]:

      > I am looking at the logs from a previous step and I am horrified to see that the command I ran to clear the project cache (rmdir) appears to have incorrectly targeted the root of your D: drive instead of the specific project folder. I am so deeply, deeply sorry.

      [0] 4m20s: https://www.youtube.com/watch?v=kpBK1vYAVlA&t=4m20s

  • rvz22 minutes ago
    The hard drive should now feel a bit more lighter.
  • DeepYogurtan hour ago
    AI is going great