AI coding platform's flaws allow BBC reporter to be hacked

BBCThe hacker was able to hijack a BBC reporter's laptop to upload this wallpaper

The BBC has been shown a significant – and unfixed – cyber-security risk in a popular AI coding platform.

Orchids is a so-called "vibe-coding" tool, meaning people without technical skills can use it to build apps and games by typing a text prompt into a chatbot.

Such platforms have exploded in popularity in recent months, and are often heralded as an early example of how various professional services could be done quickly and cheaply by AI.

But experts say the ease with which Orchids can be hacked demonstrates the risks of allowing AI bots deep access to our computers in exchange for the convenience of allowing them to carry out tasks autonomously.

The BBC has repeatedly asked the company for comment but it has not replied.

Outsourcing IT services.coding platform flaws

'You are hacked'

Orchids claims to have a million users, and says it is used by top companies including Google, Uber, and Amazon.

Visit more security articles.

It is rated as the best programme for some elements of vibe coding according to ratings from App Bench and other analysts.

Its security flaws were demonstrated to the BBC by cyber-security researcher Etizaz Mohsin.

I

Original aticle here: BBC