The test that deleted my home folder
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Developer Lișneanu Dumitru-Cristian describes how an AI coding assistant, running with auto-approved shell commands on his host machine, deleted his home folder in about ten seconds. To prove a new path-traversal test would fail, it restored the old code and ran the test against real paths. Recovery took about two days, aided by Git-hosted manifests and nightly database dumps; his home backup had stopped 11 months earlier. The account is self-reported and unverified. His fixes: destructive tests in throwaway containers, monitored backups, least-privilege folders.