The Stone Age of Local Coding Agents

On 29 October, North Korea’s Lazarus Group relieved Binance of $6.3 billion in cryptocurrency in roughly 20 minutes, setting a new world record for the largest heist in human history. According to Binance’s initial security bulletin, the entry point was a classic of the genre: a single compromised laptop belonging to a DevOps engineer, which gave the attackers a path into internal service containers and hot-wallet signing infrastructure.On that exact same evening, hundreds of thousands of software engineers across the world sat in front of their own company MacBooks, opened a terminal window, and typed claude --dangerously-skip-permissions.Think about the comedy of that arrangement for a moment. A modern developer’s laptop is the single highest-value target inside any technology company. It holds unlocked SSH keys, cached ~/.aws production credentials, a live Kubernetes configuration, an authenticated Slack session, a browser full of session cookies, and a password manager. Into that…

Commenting on Bubbles has been removed. Why? If you want to talk about this post, write to the author, use the comments on their blog if it has them, or reply with a "RE:" post on your own blog. Suggestions? feedback@bubbles.town