Hacker News new | past | comments | ask | show | jobs | submit
I was working on the clearly mistaken impression that "Made by Anthropic" in the cursor store meant that the artifact had been signed by Anthropic. If that is not the case, then two party's need to get their act together:

  - Cursor needs to add signing if they want to claim something was "made" by another party.

  - Anthropic needs to stamp out any provider from using said, "Made by Anthropic" until they start adding signing to their process.   Trademark law is useful here.

Until that happens - it's almost like you have to delete any extension from the Cursor Store off of your Cursor instance - kind of a crapshoot what you are actually downloading, no?

For example - what guarantee do I have with something like: " This publisher has verified ownership of cursor.com" - when I'm looking at the WSL extension. Are there any guarantees it's not been replaced with some other extension?

The core problem is that VScode extensions does not need to be signed at all. Mind boggling stupid design decision.
loading story #50311743
loading story #50312023
loading story #50313224
You want an AI company to care about IP? And you aren't being sarcastic?