AI Loading Unsigned Markdown is a Context-Trust Defect (opens in new tab)

Profero reports that Claude Desktop launches an AI child process with --allow-dangerously-skip-permissions, maps what that child can and cannot do, and claims an attack needs no shell access. Their post is called “We Added a Detection Rule. We Were Not Expecting This”. Points for click-bait, and the bones are good, although a few conclusions could … Continue reading AI Loading Unsigned Markdown is a Context-Trust Defect →