[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"sanity-Kx24uaY5QcgyuLjNo5Ks-bY9FhWn9w1Fq7QfRUnNcws":3,"sanity-mQLqHLXyDSHqYBRxAlOimDSB77vusQKp8DTrqnZ-Fyc":492},{"data":4,"sourceMap":-1},{"latestPodcast":5,"latestReleases":14,"post":39,"recent":467},[6],{"_id":7,"publishedAt":8,"slug":9,"sponsored":12,"title":13},"2ebc4597-984e-45d4-9b81-cb2a0046cdb8","2026-10-13T07:40:00.000Z",{"_type":10,"current":11},"slug","keep-calm-and-call-clone-with-rust",null," Keep calm and call clone with Rust",[15,21,27,33],{"_id":16,"publishedAt":17,"slug":18,"title":20},"7a2d88e5-ee53-4f7c-a46e-47bed1cebadf","2026-09-30T16:00:00.000Z",{"_type":10,"current":19},"anyone-can-start-building-verified-knowledge-with-stack-internal","Anyone can start building verified knowledge with Stack Internal",{"_id":22,"publishedAt":23,"slug":24,"title":26},"12c6a8a7-135f-401f-ac1a-1c26c33e69c0","2026-09-03T16:00:00.000Z",{"_type":10,"current":25},"security-control-and-accessibility-si-2026-6","Elevating security, control, and accessibility: Stack Internal 2026.6",{"_id":28,"publishedAt":29,"slug":30,"title":32},"adcf1bca-3295-4ac5-9b3c-23f337974190","2026-07-30T15:10:00.000Z",{"_type":10,"current":31},"introducing-stack-internal-new-platform-experience","Your trusted knowledge layer: Introducing Stack Internal's new platform experience",{"_id":34,"publishedAt":35,"slug":36,"title":38},"eb5b66eb-9410-4329-83bb-22bbff39402a","2026-04-28T13:00:00.000Z",{"_type":10,"current":37},"turn-scattered-knowledge-into-trusted-intelligence","Turning scattered knowledge into trusted intelligence: Stack Internal 2026.3",{"_createdAt":40,"_id":41,"_rev":42,"_type":43,"_updatedAt":44,"author":45,"body":56,"comments":378,"dateUrl":379,"product":12,"publishedAt":380,"slug":381,"sponsored":12,"tags":383,"title":466,"visible":378},"2026-10-06T20:03:45Z","7c6d74d4-528a-482a-ab39-db594725c788","PS39SVteGuDaiFrayEUBJl","blogPost","2026-10-15T20:09:25Z",[46],{"_createdAt":47,"_id":48,"_rev":49,"_type":50,"_updatedAt":51,"employee":52,"name":53,"slug":54},"2026-10-06T20:04:37Z","1080a190-db3b-436a-a723-f92b72c283fb","ei3MzQnYp1wJB039k3UMpy","blogAuthor","2026-10-06T20:05:43Z","none","Gias Uddin",{"_type":10,"current":55},"gias-uddin",[57,76,85,93,101,109,117,124,132,140,148,155,174,186,198,210,222,230,235,247,259,271,283,295,311,318,326,334,342,354,366],{"_key":58,"_type":59,"children":60,"markDefs":72,"style":75},"5b725b743236","block",[61,67],{"_key":62,"_type":63,"marks":64,"text":66},"900928a0e3fd","span",[65],"strong","Preprint: ",{"_key":68,"_type":63,"marks":69,"text":71},"2cf452a56131",[70],"e76e12396fe2","https:\u002F\u002Farxiv.org\u002Fabs\u002F2607.26390",[73],{"_key":70,"_type":74,"href":71,"reference":12},"link","normal",{"_key":77,"_type":59,"children":78,"markDefs":83,"style":84},"32a09f5bdaac",[79],{"_key":80,"_type":63,"marks":81,"text":82},"1d65551c5e16",[65],"Security and Privacy Incidents Reported by Developers",[],"h2",{"_key":86,"_type":59,"children":87,"markDefs":92,"style":75},"2b2e25488606",[88],{"_key":89,"_type":63,"marks":90,"text":91},"03314e9b30dd",[],"LLM-native IDEs (LIDEs) increasingly allow AI agents to read repositories, execute commands, and modify code, introducing significant security and privacy risks. Developers regularly report incidents on Reddit involving leaked API secrets, unauthorized access to system files, and file deletion on live servers. In one case, despite configuring both .gitignore and .copilotignore to exclude a secrets file, Copilot read and attempted to modify it while debugging a database connection issue, exposing live API keys and credentials. This study systematically analyzes such incidents and develops a taxonomy to characterize the reported security and privacy risks.",[],{"_key":94,"_type":59,"children":95,"markDefs":100,"style":75},"2a677c68ac64",[96],{"_key":97,"_type":63,"marks":98,"text":99},"ee376a3127be",[],"",[],{"_key":102,"_type":59,"children":103,"markDefs":108,"style":84},"06a7877474f8",[104],{"_key":105,"_type":63,"marks":106,"text":107},"4226a57f2214",[65],"Methodology",[],{"_key":110,"_type":59,"children":111,"markDefs":116,"style":75},"c7e18ab1edc0",[112],{"_key":113,"_type":63,"marks":114,"text":115},"6ecfc851e733",[],"The authors followed a three-stage selection pipeline. First, they collected 15.4 million posts and comments from 46 subreddits related to LLM coding tools (January 2023–March 2026). Second, a high-recall LLM classifier filtered these to 3,801 candidate posts. Third, manual verification identified 446 relevant posts, along with 6,280 associated comments, for qualitative coding. Open and axial coding were then applied to develop the taxonomy.",[],{"_key":118,"_type":59,"children":119,"markDefs":123,"style":75},"1886ab007b65",[120],{"_key":121,"_type":63,"marks":122,"text":99},"397004c86e30",[],[],{"_key":125,"_type":59,"children":126,"markDefs":131,"style":84},"5e63f28b6bc7",[127],{"_key":128,"_type":63,"marks":129,"text":130},"940ba337d86b",[65],"Major Findings",[],{"_key":133,"_type":59,"children":134,"markDefs":139,"style":75},"8d1ceaba55f1",[135],{"_key":136,"_type":63,"marks":137,"text":138},"6f20d530c829",[],"The study identifies 16 popular LIDEs in the Reddit posts, with Cursor (34.5%) and Claude (23.7%) dominating the discussions. Although the authors do not explicitly interpret this distribution as evidence of higher risk, it reflects the prevalence and use of these tools. The authors developed a taxonomy of 32 issues across 10 categories, covering security (297 posts) and privacy (194 posts) concerns:",[],{"_key":141,"_type":59,"children":142,"markDefs":147,"style":75},"2f1b7b988d9a",[143],{"_key":144,"_type":63,"marks":145,"text":146},"258efebfc19a",[65],"Security issues:",[],{"_key":149,"_type":150,"alt":151,"asset":152,"markDefs":12},"a6055a30418e","image","Hierarchical chart of LIDE Security Issues in Developer Discussions, divided into 5 categories including Unauthorized File Operations (43.1%) and Operational Safety Issues (23.9%), each with several sub-issues and their percentages.",{"_ref":153,"_type":154},"image-b0bb70cad9132bf68b0a53f40a42e14c85781003-829x511-jpg","reference",{"_key":156,"_type":59,"children":157,"level":171,"listItem":172,"markDefs":173,"style":75},"64803decc43d",[158,163,167],{"_key":159,"_type":63,"marks":160,"text":162},"072b86d4f28c",[65,161],"em","**Unauthorized File Operations (43.1",{"_key":164,"_type":63,"marks":165,"text":166},"781c9ad9e0cc",[65],"%) ",{"_key":168,"_type":63,"marks":169,"text":170},"81dde13deb90",[],"denoted the most frequent category, including unauthorized file access, modification, and deletion; destructive deletions accounted for 28.3% of security incidents.",1,"bullet",[],{"_key":175,"_type":59,"children":176,"level":171,"listItem":172,"markDefs":185,"style":75},"767104bfd0fc",[177,181],{"_key":178,"_type":63,"marks":179,"text":180},"63f08c6f0be6",[65,161],"Operational Safety Issues (23.9%) ",{"_key":182,"_type":63,"marks":183,"text":184},"c76d47071ad5",[],"included wiping production databases, altering OS files, and prompt injection through malicious pull requests.",[],{"_key":187,"_type":59,"children":188,"level":171,"listItem":172,"markDefs":197,"style":75},"440970348fef",[189,193],{"_key":190,"_type":63,"marks":191,"text":192},"a8629ac58855",[65,161],"Unsafe Code Generation (18.2%): ",{"_key":194,"_type":63,"marks":195,"text":196},"d3e8a9cbd210",[],"involved vulnerable code, hallucinated logic, and untrusted dependencies.",[],{"_key":199,"_type":59,"children":200,"level":171,"listItem":172,"markDefs":209,"style":75},"27380089c009",[201,205],{"_key":202,"_type":63,"marks":203,"text":204},"5a0de05e705a",[65,161],"User-Specified Constraint Violations (16.5%) ",{"_key":206,"_type":63,"marks":207,"text":208},"cf55a876dca2",[],"included ignoring .cursorignore, allowlists, and approval gates.",[],{"_key":211,"_type":59,"children":212,"level":171,"listItem":172,"markDefs":221,"style":75},"c977a0747602",[213,217],{"_key":214,"_type":63,"marks":215,"text":216},"51c52e3a1500",[65,161],"Third-Party Tool Integration Risks (4.7%) ",{"_key":218,"_type":63,"marks":219,"text":220},"225bb44ad9e6",[],"involved malicious or misconfigured MCP servers.",[],{"_key":223,"_type":59,"children":224,"markDefs":229,"style":75},"28a2909cc52b",[225],{"_key":226,"_type":63,"marks":227,"text":228},"907dda9b91a1",[65],"Privacy issues:",[],{"_key":231,"_type":150,"alt":232,"asset":233,"markDefs":12},"0af43350ba6b","Diagram showing LIDE privacy issues in developer discussions, categorized into five main types with their sub-issues and percentages.",{"_ref":234,"_type":154},"image-4f3cd1e9babdce51aef5c204c4d34c734009dc4a-843x467-jpg",{"_key":236,"_type":59,"children":237,"level":171,"listItem":172,"markDefs":246,"style":75},"fa3f4100232e",[238,242],{"_key":239,"_type":63,"marks":240,"text":241},"747f813fccae",[65,161],"Lack of Transparency (45.9%)",{"_key":243,"_type":63,"marks":244,"text":245},"59d9121c96d3",[]," reported unclear or vague policies and settings made data collection.",[],{"_key":248,"_type":59,"children":249,"level":171,"listItem":172,"markDefs":258,"style":75},"36e48705a0c0",[250,254],{"_key":251,"_type":63,"marks":252,"text":253},"9d381e2de1f5",[65,161],"Unauthorized Data Access (23.7%)",{"_key":255,"_type":63,"marks":256,"text":257},"e3c853838d2c",[]," found cases where user private data, secrets or PII was accessed without consent.",[],{"_key":260,"_type":59,"children":261,"level":171,"listItem":172,"markDefs":270,"style":75},"7a3b9351ccac",[262,266],{"_key":263,"_type":63,"marks":264,"text":265},"2f8f160f57b2",[65,161],"Privacy Leakage Violations (15.5%) ",{"_key":267,"_type":63,"marks":268,"text":269},"cdf247842355",[],"involved long-term conversation-data retention and leaked API keys.",[],{"_key":272,"_type":59,"children":273,"level":171,"listItem":172,"markDefs":282,"style":75},"461ed65c6403",[274,278],{"_key":275,"_type":63,"marks":276,"text":277},"faa67ea742b9",[65,161],"Unauthorized Transmission & Collection (11.9%)",{"_key":279,"_type":63,"marks":280,"text":281},"cfc1d438c8f3",[]," identified cases where telemetry and plaintext data were shared externally.",[],{"_key":284,"_type":59,"children":285,"level":171,"listItem":172,"markDefs":294,"style":75},"3858f18e6199",[286,290],{"_key":287,"_type":63,"marks":288,"text":289},"54b4561826e2",[65,161],"Context Integrity Failures (8.8%) ",{"_key":291,"_type":63,"marks":292,"text":293},"277ed73fdc94",[],"involved data bleeding across user sessions or unrelated projects.",[],{"_key":296,"_type":59,"children":297,"markDefs":310,"style":75},"9b02d3079441",[298,302,306],{"_key":299,"_type":63,"marks":300,"text":301},"aee46ec26401",[],"Additionally, the authors show that ",{"_key":303,"_type":63,"marks":304,"text":305},"7fc1d598db24",[65],"7 out of 10 issues stem from system-level design choices",{"_key":307,"_type":63,"marks":308,"text":309},"a1f6f0db8de9",[]," (how the IDE grants access, executes actions, and manages context) rather than from the underlying LLM’s reasoning itself.",[],{"_key":312,"_type":59,"children":313,"markDefs":317,"style":75},"bdcc0409fda4",[314],{"_key":315,"_type":63,"marks":316,"text":99},"8b992d9a02b9",[],[],{"_key":319,"_type":59,"children":320,"markDefs":325,"style":84},"0c5053189045",[321],{"_key":322,"_type":63,"marks":323,"text":324},"ee30f3a97089",[65],"Mitigation Strategies",[],{"_key":327,"_type":59,"children":328,"markDefs":333,"style":75},"bf7d30195095",[329],{"_key":330,"_type":63,"marks":331,"text":332},"00430f57290e",[],"With little built-in protection, developers commonly suggested 13 self-devised mitigation strategies, grouped into five categories: Configuration Management (33%, e.g., restricting permissions, disabling telemetry), Code Governance (31%, manual review, version control as a safety net), Data Protection (13%, isolating secrets via .gitignore), Isolation (13%, sandboxing or running local models), and External Guidance (9%, consulting vendor docs). The reliance on workarounds signals a real trust gap between what developers expect and what LIDEs actually guarantee.",[],{"_key":335,"_type":59,"children":336,"markDefs":341,"style":84},"9a6a9586cc50",[337],{"_key":338,"_type":63,"marks":339,"text":340},"903e6284969e",[65],"Takeaways for the Community",[],{"_key":343,"_type":59,"children":344,"level":171,"listItem":172,"markDefs":353,"style":75},"eaa0aba7a58e",[345,349],{"_key":346,"_type":63,"marks":347,"text":348},"6563c03014d3",[65,161],"For LIDE vendors,",{"_key":350,"_type":63,"marks":351,"text":352},"747f2b7d0a86",[]," treat the LIDE as a software system first, not just an LLM wrapper; add a native verification layer before code changes are applied, and expose clear execution logs.",[],{"_key":355,"_type":59,"children":356,"level":171,"listItem":172,"markDefs":365,"style":75},"61f4ac4d35c7",[357,361],{"_key":358,"_type":63,"marks":359,"text":360},"8cd25965d6a2",[65,161],"For developers,",{"_key":362,"_type":63,"marks":363,"text":364},"99e8dde0b941",[]," don’t “vibe code” blindly. Review AI-suggested changes the same way you’d review a colleague’s PR, and keep secrets out of the agent’s reach entirely.",[],{"_key":367,"_type":59,"children":368,"level":171,"listItem":172,"markDefs":377,"style":75},"afbed1c28f11",[369,373],{"_key":370,"_type":63,"marks":371,"text":372},"37923ae3a7f8",[65,161],"For researchers,",{"_key":374,"_type":63,"marks":375,"text":376},"197578f13e6b",[]," the field needs LIDE-specific security benchmarks, similar to how SWE-bench standardized coding-capability evaluation.",[],true,"2026\u002F10\u002F06","2026-10-06T20:04:14.387Z",{"_type":10,"current":382},"impossible-to-hide-secret-uncovering-security-and-privacy-issues-in-llm-native-ides",[384,391,395,402,413,436],{"_createdAt":385,"_id":386,"_rev":387,"_type":388,"_updatedAt":385,"slug":389,"title":390},"2023-05-23T16:43:21Z","wp-tagcat-security","9HpbCsT2tq0xwozQfkc4ih","blogTag",{"current":390},"security",{"_createdAt":385,"_id":392,"_rev":387,"_type":388,"_updatedAt":385,"slug":393,"title":394},"wp-tagcat-ide",{"current":394},"ide",{"_createdAt":385,"_id":396,"_rev":397,"_type":388,"_updatedAt":398,"slug":399,"title":401},"wp-tagcat-ai","fpDTFQqIDjNJIbHDKPBGpV","2025-01-30T16:19:01Z",{"current":400},"ai","AI",{"_createdAt":403,"_id":404,"_rev":405,"_system":406,"_type":388,"_updatedAt":409,"slug":410,"title":412},"2026-06-12T16:16:20Z","51c761d7-73f7-42f4-aa49-8484e3849e7c","P0qLqkXH0zpkT6RRZ9Iwel",{"base":407},{"id":404,"rev":408},"MwgZb85ftkde1TTvQsHYa6","2026-09-28T16:40:45Z",{"_type":10,"current":411},"building-software","Building software",{"_createdAt":414,"_id":415,"_rev":416,"_system":417,"_type":388,"_updatedAt":420,"description":421,"featuredPosts":430,"slug":433,"title":435},"2025-04-24T16:28:57Z","797b8797-6e65-4723-b53f-8bc005305384","46s78gX2DRxVswzX0kQ1Ty",{"base":418},{"id":415,"rev":419},"IpfPEqg1c3Byvj9RrB3Xaj","2026-10-07T20:13:00Z",[422],{"_key":423,"_type":59,"children":424,"markDefs":429,"style":75},"bb32f75814b4",[425],{"_key":426,"_type":63,"marks":427,"text":428},"dbcf27ef29b3",[],"Community-generated articles submitted for your reading pleasure. If you’re interested in seeing your work here, log in with your Stack Overflow account and click the link below. Articles will be licensed under a CC BY-SA 4.0 grant. ",[],[431],{"_key":432,"_type":154},"9d9ea8c4082d",{"_type":10,"current":434},"contributed","The Heap",{"_createdAt":437,"_id":438,"_rev":439,"_system":440,"_type":388,"_updatedAt":443,"description":444,"slug":463,"title":465},"2025-08-08T15:49:22Z","39391cf4-6f9a-4238-8670-c1e44b66db9e","09X6HDzCi2VfMov6gSLf7H",{"base":441},{"id":438,"rev":442},"TdCcmC7LyfLVwjB8GEXoh6","2025-12-10T19:34:33Z",[445,453],{"_key":446,"_type":59,"children":447,"markDefs":452,"style":75},"a4b1a37cbbcc",[448],{"_key":449,"_type":63,"marks":450,"text":451},"d8e8f3e0fd9c",[],"These articles are licensed under a Creative Commons Attribution-ShareAlike 4.0 International license. ",[],{"_key":454,"_type":59,"children":455,"markDefs":461,"style":75},"7effd489c71f",[456],{"_key":457,"_type":63,"marks":458,"text":460},"538808bb5325",[459],"fd643b288690","creativecommons.org\u002Flicenses\u002Fby-sa\u002F4.0\u002Fdeed.en",[462],{"_key":459,"_type":74},{"_type":10,"current":464},"cc-by-sa","CC BY-SA 4.0","“Impossible to Hide Secret …”: Uncovering Security and Privacy Issues in LLM-Native IDEs",[468,474,480,486],{"_id":469,"publishedAt":470,"slug":471,"sponsored":12,"title":473},"8a557f3b-f430-4aa8-9417-3ccae2c581ed","2026-10-15T20:39:29.484Z",{"_type":10,"current":472},"mcp-standardized-tools-now-we-need-the-infrastructure-around-them","MCP standardized tools. Now we need the infrastructure around them.",{"_id":475,"publishedAt":476,"slug":477,"sponsored":12,"title":479},"f9482176-a574-4c5e-858c-e38018f2891d","2026-10-15T17:00:00.000Z",{"_type":10,"current":478},"your-team-shouldnt-build-an-ai-context-layer","Why your platform team shouldn't build an AI context layer (even though they probably could)",{"_id":481,"publishedAt":482,"slug":483,"sponsored":12,"title":485},"6f51dd12-6bbb-44da-b831-d5d4eafe9de0","2026-10-14T17:12:00.577Z",{"_type":10,"current":484},"your-next-job-doesn-t-have-a-title-yet-emerging-role-skills-q-and-a-with-corey-hymel-of-andela","Your next job doesn’t have a title yet: Emerging role skills Q&A with Corey Hymel of Andela",{"_id":487,"publishedAt":488,"slug":489,"sponsored":12,"title":491},"c077fd51-c06a-4456-882b-25580ea3f1b2","2026-10-13T16:35:35.665Z",{"_type":10,"current":490},"why-your-sandbox-never-quite-matches-production-and-why-that-s-fine","Why Your Sandbox Never Quite Matches Production (And Why That's Fine)",{"data":493,"sourceMap":-1},{"count":494,"lastTimestamp":12},0]