Experimental News Clipping Site

Tag: coding tool

  • Cloud Blog: Five Best Practices for Using AI Coding Assistants

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/topics/developers-practitioners/five-best-practices-for-using-ai-coding-assistants/ Source: Cloud Blog Title: Five Best Practices for Using AI Coding Assistants Feedly Summary: Does owning a kitchen knife mean you know how to effectively dice onions or julienne carrots? Of course not. Access to a tool doesn’t guarantee profenciency. To get the results you’re looking for, you need to learn the…

  • Tomasz Tunguz: The Rise and Fall of Vibe Coding

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.tomtunguz.com/the-rise-and-fall-of-vibe-coding/ Source: Tomasz Tunguz Title: The Rise and Fall of Vibe Coding Feedly Summary: We’re living through the “Wild West” era of AI-powered software development. Anyone can build custom solutions in minutes rather than months. This creative explosion heads toward a reckoning. Hidden maintenance costs of thousands of “vibe-coded” micro-apps will collide with…

  • The Register: Amazon quietly fixed Q Developer flaws that made AI agent vulnerable to prompt injection, RCE

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/20/amazon_quietly_fixed_q_developer_flaws/ Source: The Register Title: Amazon quietly fixed Q Developer flaws that made AI agent vulnerable to prompt injection, RCE Feedly Summary: Move along, nothing to see here Amazon has quietly fixed a couple of security issues in its coding agent: Amazon Q Developer VS Code extension. Attackers could use these vulns to…

  • Embrace The Red: Amazon Q Developer: Remote Code Execution with Prompt Injection

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/amazon-q-developer-remote-code-execution/ Source: Embrace The Red Title: Amazon Q Developer: Remote Code Execution with Prompt Injection Feedly Summary: The Amazon Q Developer VS Code Extension (Amazon Q) is a popular coding agent, with over 1 million downloads. The extension is vulnerable to indirect prompt injection, and in this post we discuss a vulnerability that…

  • Simon Willison’s Weblog: Jules, our asynchronous coding agent, is now available for everyone

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Aug/6/asynchronous-coding-agents/ Source: Simon Willison’s Weblog Title: Jules, our asynchronous coding agent, is now available for everyone Feedly Summary: Jules, our asynchronous coding agent, is now available for everyone I wrote about the Jules beta back in May. Google’s version of the OpenAI Codex PR-submitting hosted coding tool graduated from beta today. I’m mainly…

  • The Register: Vibe coding tool Cursor’s MCP implementation allows persistent code execution

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/05/mcpoison_bug_abuses_cursor_mcp/ Source: The Register Title: Vibe coding tool Cursor’s MCP implementation allows persistent code execution Feedly Summary: More evidence that AI expands the attack surface Check Point researchers uncovered a remote code execution bug in popular vibe-coding AI tool Cursor that could allow an attacker to poison developer environments by secretly modifying a…

  • Embrace The Red: Amp Code: Arbitrary Command Execution via Prompt Injection Fixed

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/amp-agents-that-modify-system-configuration-and-escape/ Source: Embrace The Red Title: Amp Code: Arbitrary Command Execution via Prompt Injection Fixed Feedly Summary: Sandbox-escape-style attacks can happen when an AI is able to modify its own configuration settings, such as by writing to configuration files. That was the case with Amp, an agentic coding tool built by Sourcegraph. The…

  • Slashdot: 5 Million People Tried Microsoft’s AI Coding Tool ‘GitHub Copilot’ in the Last 3 Months

    —

    by

    Kurt Seifried
    in

    Source URL: https://developers.slashdot.org/story/25/08/03/037202/5-million-people-tried-microsofts-ai-coding-tool-github-copilot-in-the-last-3-months?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: 5 Million People Tried Microsoft’s AI Coding Tool ‘GitHub Copilot’ in the Last 3 Months Feedly Summary: AI Summary and Description: Yes Summary: Microsoft’s AI coding assistant, GitHub Copilot, has now reached 20 million users, showcasing significant growth in adoption, particularly among enterprise clients. The increase in users indicates…