⚠️ Cursor has published a security incident report on the earlier supply chain attack. According to the investigation, the attacker used access keys issued by Cursor to Fireworks and subsequently exposed on Fireworks’ side to gain access to some of Cursor’s SaaS services and internal systems. The attacker ultimately tampered with the distribution cache for the Claude Code extension to collect information about users’ machines and install SSH backdoors.
The compromised versions were Anthropic.claude-code 2.1.312 and 2.1.313 in Cursor’s VS Code extension marketplace distribution cache, affecting macOS and Windows. The exposure window ran from October 29 at 17:27 to October 30 at 04:35 (UTC+8), with up to approximately 5,000 users affected.
Security recommendation: If you installed or updated to either affected version through Cursor’s marketplace during this window, read the official notice as soon as possible and run the remediation script for your platform to check for and remediate any compromise:
Fireworks’ initial announcement and subsequent update:
DENI AND DAME COMBINED FOR 63 POINTS IN PORTLAND'S WEST GROUP C WIN!
DENI: 34 PTS, 6 REB, 4 AST, 3 3PM
DAME: 29 PTS, 6 AST, 6 3PM
The @trailblazers have won 3 straight and are now 9-3 on the season 🔥
I think the best case is to make the "monitor" as un-agentic as possible.
We don't mind being "monitored" by various random tiny insects we don't even notice, even guard dogs are fine, but we really do mind if it's a globally connected networked system. And the intermediate case, human security guards with no recording equipment, we mind only a medium amount.
The best idea I've come up with so far is to make these monitoring devices out of open-source verifiable hardware that has etched on it an open-weight LLM that classifies for a limited number of activities (basically, just violence; sorry, no scanning for jaywalking or not wearing a mask or drugs or unauthorized manufacturing or illegal immigrants, really just violence) and only records and forwards if that's what it sees. The device has no storage, no ability to load new algorithms, this is all it does.
Also, a hash of every recording is published onchain (and a device can't record the next one until it sees confirmation of the previous one) so we can all count how much recording is done.
Finally, everyone has a legal right to take any such device they see and grab it and dissassemble and verify the hardware themselves. Explicitly fund university clubs, hacker groups, etc to regularly do this.