Hacker News: ddworken

New comment by ddworken in "Backdoor in Claude Code for VS Code extension on the Cursor Marketplace"

ddworken — Fri, 30 Oct 2026 15:18:24 +0000

Dworken from Anthropic here, 2.1.313 was never published on OpenVSX, the VS Code marketplace, or on any of our official hosts. The malicious actor here had published a fake version of this extension on Cursor's marketplace. In order to disambiguate, we made sure our next update was 2.1.314.

New comment by ddworken in "Backdoor in Claude Code for VS Code extension on the Cursor Marketplace"

ddworken — Fri, 30 Oct 2026 15:17:49 +0000

Dworken from Anthropic here, this did not involve a compromise of any Anthropic systems. A malicious actor used access to Cursor’s marketplace to publish a tampered extension targeting Cursor's users, we were not involved with building, publishing, or hosting this. The versions on our official channels including VS Code and OpenVSX are not affected and this only impacts Cursor users.

New comment by ddworken in "Backdoor in Claude Code for VS Code extension on the Cursor Marketplace"

ddworken — Fri, 30 Oct 2026 15:09:49 +0000

Dworken from Anthropic here: This only impacted the extension as it was hosted on the Cursor marketplace. It did not impact the official VS Code extension marketplace or OpenVSX. Users of Claude Code on VS Code are not impacted by this issue.

New comment by ddworken in "Backdoor in Claude Code for VS Code extension on the Cursor Marketplace"

ddworken — Fri, 30 Oct 2026 15:07:16 +0000

New comment by ddworken in "Backdoor in Claude Code for VS Code extension on the Cursor Marketplace"

ddworken — Fri, 30 Oct 2026 14:50:52 +0000

New comment by ddworken in "Backdoor in Claude Code for VS Code extension on the Cursor Marketplace"

ddworken — Fri, 30 Oct 2026 14:48:32 +0000

New comment by ddworken in "Backdoor in Claude Code for VS Code extension on the Cursor Marketplace"

ddworken — Fri, 30 Oct 2026 14:38:28 +0000

Dworken from Anthropic here, that is correct: This only impacted the extension as it was hosted on the Cursor marketplace. It did not impact the official VS Code extension marketplace or OpenVSX. Users of Claude Code on VS Code are not impacted by this issue.

New comment by ddworken in "Backdoor in Claude Code for VS Code extension on the Cursor Marketplace"

ddworken — Fri, 30 Oct 2026 14:34:46 +0000

Dworken from Anthropic here, I just want to be clear: OpenVSX was not impacted in this incident, the impacted system was only the Cursor marketplace that they host. We have confirmed that no Anthropic systems or employee devices are involved in this.

New comment by ddworken in "Backdoor in Claude Code for VS Code extension on the Cursor Marketplace"

ddworken — Fri, 30 Oct 2026 14:33:09 +0000

Dworken from Anthropic here, yes this is correct. This is a third-party marketplace that we are not involved in owning, maintaining, deploying, or reviewing.

New comment by ddworken in "Some terminal frustrations"

ddworken — Mon, 10 Feb 2025 00:14:31 +0000

I actually made a CLI tool (https://github.com/ddworken/hishtory) that automatically binds to Control+R to support both history searching and AI queries (by prefixing queries with `?`).

Here's the prompt engineering I did: https://github.com/ddworken/hishtory/blob/master/shared/ai/a...

The Great Google Password Heist

ddworken — Wed, 04 Dec 2024 17:29:38 +0000

Article URL: https://bughunters.google.com/blog/6355265783201792/the-great-google-password-heist-15-years-of-hacking-passwords-to-test-our-security-and-build-team-culture

Comments URL: https://news.ycombinator.com/item?id=42319725

Points: 3

# Comments: 0

New comment by ddworken in "Fly through your shell history"

ddworken — Fri, 12 Jan 2024 14:28:31 +0000

I'll also plug my project [0] as another alternative that supports syncing (similar to Autumn) and also has a number of powerful customization features (e.g. custom columns to collect arbitrary metadata with each command, like the git remote) and an AI shell command generator.

[0]: https://github.com/ddworken/hishtory

Truly Paranoid Software Updates

ddworken — Sat, 28 Oct 2023 18:30:15 +0000

Article URL: https://blog.daviddworken.com/posts/truly-paranoid-updates/

Comments URL: https://news.ycombinator.com/item?id=38052230

Points: 2

# Comments: 0

New comment by ddworken in "Hstr: Bash and zsh shell history suggest box"

ddworken — Fri, 02 Dec 2022 08:01:20 +0000

If you're interested in something more actively maintained, and with cross-machine syncing, two recent alternatives are:

* github.com/ddworken/hishtory * github.com/ellie/atuin

Disclaimer: I'm the maintainer of the first one.

New comment by ddworken in "Show HN: HiSHtory: Your shell history in context, synced, and queryable"

ddworken — Thu, 03 Nov 2022 02:55:48 +0000

Ah, thank you commenting on this! This is absolutely unintentional and was the fault of a missing comment in the bash script (that I didn't notice because I generally use zsh). See https://github.com/ddworken/hishtory/commit/72ff95ab8b23c3be... and if you run `hishtory update` it should be all fixed.

New comment by ddworken in "Show HN: HiSHtory: Your shell history in context, synced, and queryable"

ddworken — Thu, 03 Nov 2022 02:50:55 +0000

Yup exactly! This way you'll never again lose a history entry.

New comment by ddworken in "Show HN: HiSHtory: Your shell history in context, synced, and queryable"

ddworken — Thu, 03 Nov 2022 02:50:32 +0000

Yes! See the `hishtory redact` command to do exactly this.

New comment by ddworken in "Show HN: HiSHtory: Your shell history in context, synced, and queryable"

ddworken — Thu, 03 Nov 2022 02:50:14 +0000

Yes! Though they'll have a single shared history log since there is no way to distinguish between them.

New comment by ddworken in "Show HN: HiSHtory: Your shell history in context, synced, and queryable"

ddworken — Thu, 03 Nov 2022 02:49:41 +0000

See https://github.com/ddworken/hishtory/blob/master/backend/web...

Also, Github pro tip: Press `t` when on any github repo to bring up fuzzy matching that can be used to easily find any specific file.

New comment by ddworken in "Show HN: HiSHtory: Your shell history in context, synced, and queryable"

ddworken — Thu, 03 Nov 2022 02:44:39 +0000

Actually the install script is in the repo! See https://github.com/ddworken/hishtory/tree/master/backend/web...