Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://mastodon.social/users/danluu/statuses/112480834721071831">Dan Luu (danluu@mastodon.social)'s status on Wednesday, 22-May-2024 08:16:28 JST</a><a href="https://mastodon.social/@danluu" title="danluu@mastodon.social"><img src="https://gnusocial.jp/avatar/35339-48-20221122073124.webp" width="48" height="48" alt="Dan Luu" style="position: absolute; left: 0; top: 0;">Dan Luu</a></section><article><p>Wow, people really don't like iTerm2 adding an optional AI integration which requires you to enter your OpenAI key to use, calling it "no longer fit for purpose", etc.</p><p>Someone pointed out that this feature is optional and not only has to be enabled, but it requires you to enter a key to use. That user was, apparently, reported on gitlab and is now blocked.</p><p><a href="https://gitlab.com/gnachman/iterm2/-/issues/11470" rel="nofollow noreferrer">https://gitlab.com/gnachman/iterm2/-/issues/11470</a></p><p>It reminds me a bit of how some people don't like "algorithms", as in <a href="https://x.com/danluu/status/983466330320965632" rel="nofollow noreferrer">https://x.com/danluu/status/983466330320965632</a>.</p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/3124834#notice-6188943">In conversation</a><time datetime="2024-05-22T08:16:28+09:00" title="Wednesday, 22-May-2024 08:16:28 JST">about 6 months ago</time> <span>from <span><a href="https://mastodon.social/@danluu/112480834721071831" rel="external" title="Sent from mastodon.social via ActivityPub">mastodon.social</a></span></span><a href="https://mastodon.social/@danluu/112480834721071831">permalink</a><h4>Attachments</h4><ol><li><label><a rel="external" href="https://gnusocial.jp/attachment/2673698">Provide a build without ChatGPT integration
Open Issue created
11 hours ago
by
Brian Candler
Feature Request
SummaryI just found this is the release notes for iTerm2 3.5.0:- Using OpenAI's ChatGPT API, iTerm2 can now write
  commands for you, interpret the output of
  commands, and guide you towards a goal. See the
  AI section below for details.Sadly, this makes iTerm2 completely untenable for me. Do I have to spell out why?    There is a risk that everything I type is being sent to someone else's server somewhere
    There is a risk that some LLM-generated random spew is typed into my shell and executed ?! (possibly as root)I don't care if there's a buried flag that enables or disables this behaviour. I want a binary that doesn't have this capability in it at all.I haven't donated to iTerm2, but I would pay for a version which doesn't have any remote communication capability in it (no OpenAI, no remote syntax highlighting or remote autocomplete or web search or mail reader). If I want remote communication, I'll use ssh thank you.Aside: recent Apple CPUs do have a "neural engine", but I'm also not interested in downloading a multi-gigabyte LLM and running it locally. As far as I'm concerned, the job of a terminal program is to take what I type and submit it to the system, and to print what the system returns.
AlternativesI have now disabled "Check for updates automatically" in iTerm2 Settings (General &gt; Services) so that I don't get 3.5.0, but it's o...</a></label><br><a href="https://files.mastodon.social/media_attachments/files/112/480/822/122/128/160/original/282dfa52ca1bcafd.png" rel="external">https://files.mastodon.social/media_attachments/files/112/480/822/122/128/160/original/282dfa52ca1bcafd.png</a></li><li><label><a rel="external" href="https://gnusocial.jp/attachment/2673699">
Tom N
@ag_tjnii · 5 hours agoAs I mentioned in the other thread I use iTerm2 to access systems with data restrictions such as SOC2, HIPAA, PCI, and GDPR. I have to be able to trust my terminal. The fact that iTerm2 now has options to send my terminal data off to 3rd parties means it's no longer fit for purpose. If a feature is added to send data off to a 3rd party server by default and I miss it I'm now in violation of compliance and could be in legal trouble. It also won't surprise me if my organization bans iTerm2 once Security catches wind of this.I think AI command generation is not a feature desired by the majority of users, and for most users is a security and operational negative. Be careful chasing this fad, you have the real risk of alienating your user base.imdat celeste [witchzard]
@imdatceleste · 5 hours agoThis! One of my clients is a data room provider and I develop software for them, including remote access to their staging and production systems through a shell.I will ask all team members there to be aware of this update and stick to 3.4.x until further notice as neither of us can use 3.5.0 with good conscience anymore.Please remove this feature asap.Equally, as I mentioned in the other issue before, I am seriously considering stopping my sponsorship if this "feature" stays in.
Edited 5 hours ago by imdat celeste [witchzard]
Josh Smift
Josh Smift
@irilyth · 5 hours agoIn case anyone on this ticket needs this info, details about how to ...</a></label><br><a href="https://files.mastodon.social/media_attachments/files/112/480/822/455/265/686/original/f16ce6d34508b5fd.png" rel="external">https://files.mastodon.social/media_attachments/files/112/480/822/455/265/686/original/f16ce6d34508b5fd.png</a></li><li><label><a rel="external" href="https://gnusocial.jp/attachment/2673700">
Sora Minazuki
@soraminazuki · 4 hours ago        There is a risk that everything I type is being sent to someone else's server somewhere
        There is a risk that some LLM-generated random spew is typed into my shell and executed ?! (possibly as root)This is completely false. There is no invasion of privacy or risk of commands being executed without consent. Looking at the release note, wiki, and the actual code, for data to be sent to OpenAI, you have to purchase an API token, set it up, and explicitly type in a question in a dedicated text box. By default, only the question you type and the name of your Shell (e.g., zsh) and OS (Darwin) will be sent.https://gitlab.com/gnachman/iterm2/-/blob/master/sources/iTermPreferences.m#L200-202The generated commands also won't be executed automatically unless you explicitly check the box "Run commands automatically" and ignore a popup warning against doing so.https://gitlab.com/gnachman/iterm2/-/blob/master/sources/ToolCodecierge.swift#L679-692From the onboarding UI:UIAs much as I don't personally care for AI features, that this is an security or privacy risk that people can accidentally run into is just not true.
Edited 4 hours ago by Sora Minazuki</a></label><br><a href="https://files.mastodon.social/media_attachments/files/112/480/823/398/215/519/original/44b4b901f2f3ae42.png" rel="external">https://files.mastodon.social/media_attachments/files/112/480/823/398/215/519/original/44b4b901f2f3ae42.png</a></li><li><label><a rel="external" href="https://gnusocial.jp/attachment/2673701">https://gitlab.com/soraminazukiBlocked user
@soraminazuki
This user is blocked</a></label><br><a href="https://files.mastodon.social/media_attachments/files/112/480/823/696/024/154/original/32ff8866c91dd56d.png" rel="external">https://files.mastodon.social/media_attachments/files/112/480/823/696/024/154/original/32ff8866c91dd56d.png</a></li><li><label><a rel="external" href="https://gnusocial.jp/attachment/2673702">Untitled attachment</a></label><br></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Dan Luu (danluu@mastodon.social)'s status on Wednesday, 22-May-2024 08:16:28 JST Dan Luu
Wow, people really don't like iTerm2 adding an optional AI integration which requires you to enter your OpenAI key to use, calling it "no longer fit for purpose", etc.
Someone pointed out that this feature is optional and not only has to be enabled, but it requires you to enter a key to use. That user was, apparently, reported on gitlab and is now blocked.
https://gitlab.com/gnachman/iterm2/-/issues/11470
It reminds me a bit of how some people don't like "algorithms", as in https://x.com/danluu/status/983466330320965632.
In conversationabout 6 months ago from mastodon.socialpermalink
Attachments

Public

Embed Notice

HTML Code

Corresponding Notice