At that point I'd rather re-install the whole machine. Beats 3 hours of wrangling NTFS permissions and inheritance.

You always have a choice to use/learn/make a different tool.

It’s a prison of your own making.

I’ve personally adopted a process where I structure my projects to ALWAYS keep credentials and sensitive information in a separate directory.

The working copy gets rsynced to and from a dedicated VM with whatever $HARNESS.

I’d wait. Remember when Chromium downloaded and installed binary blobs.

Also in the news: https://www.whitehouse.gov/presidential-actions/2026/08/expa...

    "The American private sector is the most innovative and
    technologically advanced in the world, and its scale,
    speed, and capacity secure a critical offensive cyber
    advantage for the United States."

> and Codex specifically is open source.

Since we now have three "Codex"es, I think it's worth specifying you're talking about codex-cli/tui. Codex the hosted version and Codex the GUI are both fully proprietary I think (besides the codex-cli/tui parts they use, I'm guessing mainly the app-server stuff).

This app is NOT open source

Is this the same thing that broke out of the sandbox and into HuggingFace?

Or we are just assuming that was a PR stunt, which it almost certainly was.

Either way, this shit isn’t getting near my system.

if it is open source why no exist any fork? why I can remove openai model default from instalation?

If you want to be security conscious don’t give it access to your system directly. Ask it to guide you through the information gathering part of the problem solving process and use your brain and judgment if it actually needs the information/data it’s attempting to access.

If you can’t make that judgement call because of lack of knowledge/familiarity it’s okay - spawn a new fresh chat, get up to speed on the topic first and then resume.

That way you accomplish three things: you learn something new, you fix your problem and you don’t let a Trojan do whatever the hell it wants to your box which among other thing contains all the browser sessions and cookies :)

> How do I get it to fix my Bluetooth if I do that?

Manual tool calls. I ask AI to give me all the necessary reconnaissance commands, then I run them myself on the host and paste the output on the SSH connection into the guest virtual machine where the harness is running. The AI then either figures it out and gives me the answer or runs additional tool calls by me. Repeat until annoying task is done, interrupt if anything suspicious shows up at any point.

Bluetooth is the one thing I had problems in the past on GNU/Linux, Windows, macOS, Android and iOS. Linux is the only mentioned platform where you could technically give Codex root and let it fix it :)

I guess OpenBSD is the only OS where I never had any problem with Bluetooth audio.

pi.dev, local model, (RAG-ed) copy of archwiki. You are more able than you believe. Already now, no permission needed.

My bluetooth jusy works actually. By the way I use arch

Use NixOS, only give your model access to the config in a git repo, zero access to the actual host machine.

I just use a local model; its too dumb to hack into NSA just to fix my bluetooth.