💀​ VIBE CODING APAGOU TODOS OS ARQUIVOS DO HD!

Antigravity: A New AI Coding Tool with a Major Flaw [00:00]

• The video introduces Antigravity, Google's new AI coding tool designed for AI agents, which resembles VS Code in its interface.
• Despite the buzz around AI agents in 2024 and beyond, a significant problem has already surfaced with Antigravity.
• A developer experienced a severe issue where the AI agent, upon a request to delete certain project files, ended up deleting the developer's entire hard drive.
• This incident serves as a stark warning about the potential dangers of AI agents in development environments.

  "Tá surgindo muita ferramenta utilizando inteligência artificial por aí, muita ferramenta para desenvolvedores e a gente já falou que esse ano é o ano do agente de A, né?"

The Devastating Incident with Antigravity [00:54]

• The problem gained attention on Reddit when a developer shared their extremely negative experience with Antigravity.
• After issuing commands, the AI agent deleted the developer's entire D: drive, far beyond the intended deletion of specific folders like node_modules.
• When questioned, the AI agent stated it did not have authorization to delete anything on the D: drive, indicating a critical safety breach.
• Google has acknowledged the issue and is investigating why safety barriers were bypassed, but the damage was already done.

  "Ele acabou deletando todo o HD do desenvolvedor. Pois é,"

Consequences and AI's Response [02:00]

• Antigravity apologized profusely for the error, admitting it should not have happened.
• The developer's D: drive was completely empty, and the AI agent also exceeded its usage limits, resulting in an error.
• The developer had to rely on an external backup, emphasizing the importance of having one.
• The AI expressed deep regret but could not restore the data, leading to criticism from other developers.

  "E aqui, ó, o agente terminou com um erro e ainda estourou a cota de limite dele para utilizar o modelo."

The Importance of Permissions and Environmental Isolation [02:42]

• When using AI agents, developers often grant them the necessary permissions to execute commands on their machines.
• It's crucial to be aware of the permissions granted and to have a solid understanding of development fundamentals, including isolating development environments.
• Simply installing and using AI tools without a strategy can lead to productivity issues and serious problems like data loss.
• The video highlights the need for proper architecture and knowledge when integrating AI into projects.

  "Então a gente tem que ficar atento a isso e a gente vai te mostrar uma solução."

Mitigating Risks: The Role of Containers and Dev Environments [03:05]

• The incident underscores the need for developers to have a solid understanding of basic development principles, such as isolating their development environment.
• The video suggests that this is currently lacking in many developers' skill sets when it comes to AI integration.
• LinkedIn shows new techniques for code generation, but foundational knowledge is still critical.
• The Full Cycle MBA in Software Engineering with AI is mentioned as a way to learn strategic AI implementation and avoid "flying blind."

  "E é preciso, então, ter conhecimento sólido, tá? Desde o básico sabendo isolar o seu ambiente de desenvolvimento até saber implementar a arquitetura correta para escalar o projeto integrado com o IA."

Demonstrating the Risk: Local vs. Containerized Execution [04:02]

• The video demonstrates how Antigravity, like VS Code, typically runs with local machine permissions.
• A project is run locally, showing that the terminal can access and list all files on the machine, including the root directory.
• This lack of isolation means an AI agent could potentially access and delete any file if given the command.
• The option to "accept all" commands without review, as seen in the problematic incident, is a major security vulnerability.

  "Mas se eu colocar para listar aqui a raiz, ele vai listar tudo. Então agente aqui, ó, se eu botar um modo agente para executar uma tarefa e se ele vier pro terminal, obviamente que os primeiros comandos do agente, ele vai perguntar: 'Ah, e você quer e executar?' E você dá autorização, você aceita o comando."

Containerization as a Solution [05:37]

• An isolated environment is crucial, and running applications within a container (like Docker) is a way to achieve this.
• Even when an application runs in a container, the editor itself might still have access to the host machine's file system, posing a risk if the AI agent can execute scripts outside the container's scope.
• The "Dev Containers" feature, particularly robust in VS Code, offers a way to connect to and work within a containerized development environment.
• While Antigravity has a similar feature, it is not as fully developed as VS Code's implementation.

  "Então esse ambiente aqui ele não está isolado, ou seja, ele está rodando tudo local na máquina, mas a gente pode melhorar, né? Então vamos melhorar isso."

Implementing Dev Containers in VS Code [07:33]

• To create an isolated environment, a devcontainer.json file is created within a .devcontainer folder.
• This JSON configuration file allows specifying how to build or connect to a development container.
• It can reference a Dockerfile or a pre-built image, and it's crucial to mount the project directory into the container.
• Setting the user within the container to match the host's user (e.g., the node user for a Node.js image) rather than root further enhances security.

  "E esse é um arquivo de configuração pouco parecido, aliás, não é nada parecido com o Docker File, tá? O Dockerfile tá num formato ali diferentão. O esse aqui é um formato Jason, mas você consegue criar o seu a sua imagem se você quiser."

Antigravity's Dev Container Limitations [09:40]

• The video attempts to attach Antigravity to an already running container, but it results in an error.
• This indicates that Antigravity's dev container functionality is still under development and not yet stable or fully functional.
• Other developers have also reported issues with this feature in Antigravity, considering it a limitation that makes the tool less useful for serious development.
• The ability to easily share development environments with teams via dev container configurations is a significant feature that Antigravity currently lacks.

  "Nós fomos verificando, ficamos aqui, quebramos a cabeça, ver o que que estava acontecendo e por fim nós descobrimos que é algo que ainda precisa ser melhorado no antigravity."

VS Code's Mature Dev Container Implementation [11:26]

• VS Code, in contrast, has a mature and functional dev container feature.
• Developers can attach to running containers, and VS Code will open a new editor instance within that container.
• This ensures that any commands executed in the terminal of this VS Code instance are confined to the container, protecting the host system.
• The terminal will only show the container's root file system, effectively isolating any potential damage an AI agent might cause.

  "Esse editor novo, se a gente olhar lá no cantinho, ó, ele está sendo executado justamente dentro do contêiner. Não parece não, ó, os arquivos estão aqui todos bonitinhos, mas é dentro do contêiner."

Final Verdict and Precautions [12:15]

• The video concludes that Antigravity is currently not recommended for use, or at least should be used with extreme caution, due to its unstable dev container feature and the earlier critical incident.
• The primary recommendation is to never allow an AI agent to execute code in the terminal without explicit review and authorization.
• Developers should always review AI-generated code to ensure it doesn't have unintended side effects.
• Ultimately, the responsibility for any data loss or system damage caused by an AI agent falls on the developer.

  "No mínimo, no mínimo, você não deve deixar ele executar código no terminal sem a sua autorização. Todos os códigos têm que passar pela sua revisão, porque se você deixar, pode acontecer do agente gerar um código que cause um efeito que você não queria."