frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Asked Codex to redesign a page; it pushed my repo to OpenAI infra

https://bhanu.io/blog/codex-pushed-my-private-repo-to-an-openai-server
25•npmn•3h ago

Comments

throwitaway222•3h ago
There are now a lot of baked in skills that simplify deployment for people that don't understand deployment. They probably should have asked first before. Since skills are "instructions" and making a skill a default, it makes sense that YOU didn't ask for this, but the skill did.
npmn•2h ago
Agreed - it felt like codex was pushing to my git repo - I said yes, then quickly realised what was already done .
carljungslabtek•54m ago
Yeah they really should have a “dev mode” and a “normie mode”. I don’t want anything they could cook up like openai-hosting running, ever.
ddxv•1h ago
I think this is where OpenAI and Anthropic will need to go. They need to lock their clients into an ecosystem.

Maybe they invent some file format proprietary for their projects.

Most likely they run more and more in the cloud such that it's harder to switch away to cheaper models.

dpoloncsak•1h ago
>Treat the repo you point it at as already leaked

I don't mean this to downplay your experience, and I agree it should be opt-in by default, but any software engineer using these tools should understand completely that in order to 'read' your repo it needs to copy it all to the provider's servers. Using anything short of a local model has ALWAYS been a complete leak.

cyanydeez•1h ago
using anything other than a Local model is insecure. Your business agreement is meaningless.
gruez•57m ago
I think the sane take here is that if you let loose a coding agent in a project, you should assume it can read everything, because at any point it can issue a read tool command to read arbitrary file. If you want to be selective in what you share, a coding harness is probably a bad tool for the job. That said, AI companies still shouldn't be intentionally building features that upload code wholesale because it betrays the users trust. It's like if you hired a cleaner and the first thing it did was go to every room and opened every closet/cabinet. If you let a cleaner in your house, you're basically giving them full access, and if you're not comfortable with that, maybe you shouldn't be hiring a cleaner, but that doesn't excuse the cleaner rummaging through your stuff without a good reason.

Same principle applies to the grok build fiasco a few weeks ago.

aarondong•25m ago
You could definitely tighten a harness to an extent that a coding agent would only be able to read files that you directly give as context.

But the truth is, much of the utility of the model is allowing it to grep across the codebase and explore for context.

I have great interest in zero knowledge inference, but as far as we know, it is difficult to build any sort of efficient representation.

illliillll•1h ago
I wonder why the author didn’t share the plan he got from the LLM.
eventualcomp•1h ago
Why? Why do people submit content for our reading when it is not their words? Does it give legitimacy to them? Does it push an agenda? Does it make you look professional? Is this for some kind of executive or boss?

"The part I have to be Fair about" "Why it did this", "Why this should bother you", "honest framing", ...

The things you are doing differently are not legitimate guardrails either. An AI article warrants AI-generated criticism, so I'm not going to say more.

npmn•19m ago
sure enough - feedback well received. My intention was to share what I found with the community, I did not think so far ahead. Apologies brother. I will restore the original version and remove the edits AI made.
applfanboysbgon•1h ago
Your repo was on OpenAI infra the moment you let Codex read it. You do understand the model is not running on your machine, right?
npmn•30m ago
I know the difference between AI reading selected part of the code to get the context and a git sync. Thank You for looking out/down for/on me.
IshKebab•37m ago
Wow and then it wrote an article about it and posted it to HN too!
whythismatters•29m ago
I think the cringey "honest" thing is a Claude fingerprint, or did OAI also jump on the honesty train?
npmn•21m ago
yes - I used claude to reason about the jsonml file -redact personal information and also to write big chunks of this - I mean if you aren't using a coding agent - you are a dinosaur anyways.
BigTTYGothGF•32m ago
You ought to ask it to cut it out with the little ball things that track the mouse.
aarondong•30m ago
> Codex did surface permission prompts for the add, commit, and push. It didn't run them fully invisibly. So — didn't I approve this?

Operator error exists with or without AI. Installing any dev tool that could exfiltrate your information means you are responsible for securing your environment.

Use a devcontainer. You can find starting examples on the official claude code and codex github repos. Configuring a firewall script to block egress. That being said, you will likely allowlist openAI domains so I'm not certain if the sites feature will be blocked. Worth testing.

npmn•5m ago
I am only blocking their .git server - rest of the services will remain functionable depending on how you would block the server
josefritzishere•17m ago
That's basically IP theft. wow.
npmn•2m ago
Lovely example - Thank you for sharing this.
carljungslabtek•51m ago
It doesn’t “need” to “copy it all”. Of course it has to (temporarily) send necessary code, but the coding agents I use have never just gone and read the entire repo from the first prompt. The whole thing doesn’t even fit in the context window.

I get what you’re saying about how you’re inherently trusting them by using their LLMs, but it’s different from pushing up the entire repo and git history to some server I didn’t ask for. The skill should ask if the user wants to upload to openAI “sites” or whatever the feature is called.

Claude Opus 5

https://www.anthropic.com/news/claude-opus-5
808•alvis•2h ago•456 comments

Nvidia, Microsoft, Meta warn against overregulating open-weight models

https://www.cnbc.com/2026/07/24/nvidia-microsoft-meta-open-weight-ai-models.html
217•louiereederson•6h ago•139 comments

Postgres LISTEN/NOTIFY actually scales

https://www.dbos.dev/blog/postgres-listen-notify-scalability
36•KraftyOne•44m ago•5 comments

My security camera shipped a GitHub admin token in its login page

https://hhh.hn/hanwha-github-token/
409•hhh•7h ago•151 comments

India's first privately-developed rocket reaches orbit on dramatic debut launch

https://arstechnica.com/space/2026/07/indias-first-privately-developed-rocket-reaches-orbit-on-dr...
366•sohkamyung•4d ago•104 comments

Fil-C: Garbage In, Memory Safety Out [video]

https://www.youtube.com/watch?v=5F-2Y1LPRek
32•Bootvis•1d ago•17 comments

I got into YC (Startup School) by hacking it

https://obaid.wtf/jotbook/2026/07/18/how-i-got-into-yc-by-hacking-it.html
64•speckx•1h ago•33 comments

Don't Take the Black Pill [video]

https://www.youtube.com/watch?v=zLZwpH5lCD4
36•signa11•3h ago•17 comments

Half-Life 2 running natively on HaikuOS

https://discuss.haiku-os.org/t/haiku-nvidia-porting-nvidia-driver-for-turing-gpus/16520?page=18
202•m0do1•6h ago•31 comments

Be skeptical of OpenAI's rogue hacker agent story

https://www.theguardian.com/technology/2026/jul/24/openai-rogue-hacker
251•rwmj•3h ago•113 comments

The hardest way to make a GIF

https://blog.willgrant.org/2026/07/23/the-hardest-way-to-make-gif.html
27•plaguna•12h ago•5 comments

Gsxui – Shadcn-style components for Go

https://ui.gsxhq.dev/
20•jackielii•1h ago•0 comments

Extending Polars with Rust Expression Plugins

https://fenic.ai/blog/extending-polars-with-rust-expression-plugins
25•cpard•2d ago•0 comments

The small, real, original web

https://spacetimetech.wordpress.com/2026/07/19/the-small-real-original-web/
21•speckx•2h ago•1 comments

The front end framework for correctness: built on Effect, architected like Elm

https://foldkit.dev/
57•plucafs•4h ago•32 comments

DuckPGQ – A DuckDB community extension for graph workloads

https://duckpgq.org/
28•rzk•2h ago•4 comments

It's getting harder to focus every day

https://glyphack.com/attention/
630•peykar•11h ago•353 comments

Flux 3 X Mimic: The Next Generation of Video-Action Models

https://bfl.ai/blog/flux-3-mimic
289•kensai•10h ago•47 comments

The rise and fall of language diversity through the Holocene

https://www.science.org/doi/10.1126/science.adx4343
42•delichon•3h ago•3 comments

Flux 3

https://bfl.ai/blog/flux-3
531•ThouYS•13h ago•125 comments

BGP ORIGIN attribute manipulation and its impact on the Internet

https://blog.cloudflare.com/bgp-origin-attribute/
14•sbulaev•1h ago•1 comments

Unitree As2-W

https://www.unitree.com/As2-W/
45•MehrdadKhnzd•3h ago•17 comments

JEP 541: Deprecate the macOS/x64 Port for Removal

https://openjdk.org/jeps/541
88•pmg1991•2h ago•80 comments

Em dashes are amazing

https://psychotechnology.substack.com/p/em-dashes-are-fucking-amazing
293•surprisetalk•7h ago•260 comments

Reporting Web 3D Capabilities on a Budget of $3 a Month

https://ben3d.ca/blog/reporting-web-3d-capabilities-on-a-budget
7•bhouston•4d ago•0 comments

Online Historical Encyclopaedia of Programming Languages

https://hopl.info/
17•gregsadetsky•3h ago•1 comments

Latest Airbus single aisle aircraft innovations

https://www.airbus.com/en/newsroom/stories/2026-07-how-the-a321xlr-is-redefining-single-aisle-com...
41•r2sk5t•3d ago•74 comments

Making Xen's dom0 I/O path NUMA aware

https://edera.dev/stories/numa-part-4-closing-the-xen-dom0-i-o-gap
24•virtio_vixen•2d ago•4 comments

Self-host your mail server

https://blog.haschek.at/2026/you-should-selfhost-your-mail.html
48•geek_at•1d ago•41 comments

Codeberg Divides

https://lucumr.pocoo.org/2026/7/24/codeberg-divides/
77•ashdnazg•4h ago•97 comments