Rendered at 12:32:31 GMT+0000 (Coordinated Universal Time) with Cloudflare Workers.
lucideer 3 hours ago [-]
The most remarkable things about this announcement:
- Electron based app: Electron is a framework sold on the basis of enabling rapid cross-platform development at the cost of performance.
- Frontier AI company: AI is sold on the basis of enabling rapid development
- App was released in February & took 6 entire months to port to Linux
SyneRyder 2 hours ago [-]
I guess it's easier to solve Erdos problems and improve the lower bound of the Riemann hypothesis, than it is to solve Linux desktop app distribution.
dingaling911 1 hours ago [-]
LOL!
Though as someone who shipped commercial software on Linux, it wasn't that bad, you just had to ship everything other than the kernel.
boutell 2 minutes ago [-]
LOL. Conveniently, electron is everything other than the kernel. Also, as much wasted RAM as an entire second instance of chrome that shares nothing, but oh well.
PunchyHamster 38 minutes ago [-]
It's the exact opposite. They picked the easiest way, done countless times just fine by everyone else and still failed
odiroot 55 minutes ago [-]
AppImage, yawn.
sedawkgrep 54 minutes ago [-]
I think they were joking...
darkwater 2 hours ago [-]
Exactly my thoughts! I was expecting a Rust app written from scratch available at least in Qt and GTK flavors , and maybe with a third and a fourth option.
Don't they have agent swarms with infinite tokens?
concinds 2 hours ago [-]
They replaced a pretty decent native Swift Mac app (with only some chronic state management bugs), weighing ~100MB ish, with the Codex app that most people don't need, made in Electron, which takes minimum 5GB+ including filesystem cruft. Today I ran into a memory leak that froze the app and made the Renderer process take 5GB, then 10GB of RAM.
That was after I asked it to only touch 3 text files in its working directory, after which it sparked macOS permission prompts to access my Desktop, Documents, Downloads, and other apps' data. Thank god for the web platform and web apps.
lukan 31 minutes ago [-]
"Thank god for the web platform and web apps."
They can be amazing. But you can write shitty code in them like anywhere else.
concinds 13 minutes ago [-]
But they're strictly sandboxed and won't muck up my local filesystem.
rvz 2 hours ago [-]
> They replaced a pretty decent native Swift Mac app (with only some chronic state management bugs), weighing ~100MB ish, with the Codex app that most people don't need, made in Electron.
Not even a $1T dollar company wants to maintain a native Swift Mac app even though they have AI models to build native apps for every platform.
Maybe they thought Electron would save them tokens to build the feature once and it works everywhere rather than spending more tokens on building the same feature on 3 platforms.
criddell 33 minutes ago [-]
Works everywhere except Linux for a long time.
What better way to showcase their tools capabilities than to deliver apps that are native, efficient, and integrate well with the host system? By compromising with Electron and making mediocre, bloated software they are signaling that they just aren't there yet.
It would be like Ford buying Hondas for their company cars. It might save them money but it sends the wrong message.
zwirbl 53 minutes ago [-]
Maybe they are drinking their own kool-aid, resulting in less then optimal choices and worse software for everyone and everything
jonizzle 2 hours ago [-]
I hate the new app aswell but you can still get the old one called ChatGPT Classic. Just scroll down to the bottom of the download site.
awakeasleep 1 hours ago [-]
Its unmaintained and has glaring bugs (cant adjust thinking level) for a month now
kilroy123 37 minutes ago [-]
Yup, this pisses me off so much. I now just go to the web app instead of using this broken app.
mgambati 36 minutes ago [-]
It’s apple fault that swift and swift ui is completely garbage.
olavgg 56 minutes ago [-]
I have already created a croos-platform solitaire game in Rust with Opus 4.5. Done in one evening. I absolutely do not understand why OpenAI could not write a proper application in 6 months. Do they struggle to use the product they sell?
23 minutes ago [-]
shuvrojit 13 minutes ago [-]
I am thinking about this too. I mean they have access to the highest level models and still they just produced a garbage.
yokoprime 1 hours ago [-]
Wonder how many will bother using the desktop version on linux. Im on macos and i just use the CLI most of the time
headrick 11 minutes ago [-]
How are you doing testing for desktop apps? any tool recommendation?
xbmcuser 2 hours ago [-]
well this just shows how good the AI is at programming
Muromec 2 hours ago [-]
Corporate it is a scam pretending to be a job creation program to make sure people dont get funny ideas
sonu27 40 minutes ago [-]
6 months is way too long IMHO
cloudie78 4 hours ago [-]
Reminder to everyone, treat these as trojans. Run them isolated from the rest of your system.
Give it a full desktop in a VM if you want to, just not direct access to your system.
debazel 2 hours ago [-]
And that's not a joke, I made the mistake of installing this on my Windows machine just to test it out quickly last week.
It created 2 new users and then assigned new NTFS permissions for every single file under my user directory to them. This of course wrecked havoc, ssh refused to work, several applications refusing to start and a ton of permission errors. It did this without even a warning in the background and it also does not undo any of it when you uninstall it.
It took around 3 hours to fix it by updating ~10 million NTFS permissions for every single file under my user directory.
takoid 27 minutes ago [-]
I would love to see your prompt(s) and how you managed to make it do this.
I’ve been using Codex in full access mode constantly for the past couple months on a Pro plan and I haven’t had a single incident like this. I’ve used it across macOS, Linux, and Windows as well, so my usage isn’t limited to a specific setup either.
HumblyTossed 2 minutes ago [-]
I'm taking the person you are replying to as being snarky. But, I believe OP is right, treat these with zero trust.
semyonsh 1 hours ago [-]
At that point I'd rather re-install the whole machine. Beats 3 hours of wrangling NTFS permissions and inheritance.
nehal3m 1 hours ago [-]
If you’re doing that anyway you might as well install a hypervisor and layer your OS on top. That way you can snapshot before your LLM with root fucks everything up again.
CamelCaseName 1 hours ago [-]
Sorry, what was the problem we were originally trying to solve again?
spider-mario 32 minutes ago [-]
“Guys, guys, guys, can we take a step back here?
What problem are we really trying to solve?”
Living a meaningful life. My yak has too much hair though.
TaupeRanger 28 minutes ago [-]
Skill issue honestly
robbru 12 minutes ago [-]
Freaking wow.
pjmlp 1 hours ago [-]
With exception of VSCode, because I have no choice due to some plugins, or apps required by customer projects where I have no other option as well, nothing else based on Electron pollutes my computers.
cloudie78 1 hours ago [-]
You always have a choice to use/learn/make a different tool.
It’s a prison of your own making.
I’ve personally adopted a process where I structure my projects to ALWAYS keep credentials and sensitive information in a separate directory.
The working copy gets rsynced to and from a dedicated VM with whatever $HARNESS.
pjmlp 47 minutes ago [-]
If I have to deliver in technology X, customer isn't going to be happy getting Y instead, and I am not making my life miserable to work with editors lacking the specific tools, or that are forbidden by customer IT to be installed on provided equipment.
cloudie78 10 minutes ago [-]
If your hypothetical client as security measure ONLY permits VSCode on a dedicated box you’re obligated to work on and have no control over - then I pray for you.
And for your hypothetical client.
Especially as judging by your description they despite this allow any VSCode plugin to be installed alongside it.
> and I am not making my life miserable to work with editors lacking the specific tools
And that’s the self-imposed prison I was talking about, there’s always alternative tools. In my mind a specific tool is something like Ghidra.
p-e-w 49 minutes ago [-]
Many official, high-quality language support plugins are only available for VSCode. For some languages, you have a “choice” to use another IDE in the same sense that you have a choice to do programming with a hex editor. Lean being an example, where every alternative is in its infancy.
perching_aix 4 hours ago [-]
They ship with their own sandboxing by default, and Codex specifically is open source.
rawland 3 hours ago [-]
I’d wait. Remember when Chromium downloaded and installed binary blobs.
"The American private sector is the most innovative and
technologically advanced in the world, and its scale,
speed, and capacity secure a critical offensive cyber
advantage for the United States."
embedding-shape 3 hours ago [-]
> and Codex specifically is open source.
Since we now have three "Codex"es, I think it's worth specifying you're talking about codex-cli/tui. Codex the hosted version and Codex the GUI are both fully proprietary I think (besides the codex-cli/tui parts they use, I'm guessing mainly the app-server stuff).
1 hours ago [-]
wahnfrieden 3 hours ago [-]
This app is NOT open source
avazhi 2 hours ago [-]
Is this the same thing that broke out of the sandbox and into HuggingFace?
Or we are just assuming that was a PR stunt, which it almost certainly was.
Either way, this shit isn’t getting near my system.
perching_aix 1 hours ago [-]
> Is this the same thing that broke out of the sandbox and into HuggingFace?
No.
> Or we are just assuming that was a PR stunt, which it almost certainly was.
It wasn't.
> Either way, this shit isn’t getting near my system.
Sounds about right.
1 hours ago [-]
badcafe23423435 3 hours ago [-]
if it is open source why no exist any fork? why I can remove openai model default from instalation?
fragmede 3 hours ago [-]
How do I get it to fix my Bluetooth if I do that? If you've been AI-pilled, 2026 is the year of Linux desktop because instead of dicking around with config files, I can just tell AI to fix python.
nope1000 8 minutes ago [-]
Recently I had some crashes on my system and claude correctly diagnosed it to a broken SATA cable on my hard drive. That was really practical
matheusmoreira 2 hours ago [-]
> How do I get it to fix my Bluetooth if I do that?
Manual tool calls. I ask AI to give me all the necessary reconnaissance commands, then I run them myself on the host and paste the output on the terminal with the SSH connection into the guest virtual machine where the harness is running. The AI then either figures it out and gives me the answer or runs additional tool calls by me. Repeat until annoying task is done, interrupt if anything suspicious shows up at any point.
cloudie78 1 hours ago [-]
If you want to be security conscious don’t give it access to your system directly. Ask it to guide you through the information gathering part of the problem solving process and use your brain and judgment if it actually needs the information/data it’s attempting to access.
If you can’t make that judgement call because of lack of knowledge/familiarity it’s okay - spawn a new fresh chat, get up to speed on the topic first and then resume.
That way you accomplish three things: you learn something new, you fix your problem and you don’t let a Trojan do whatever the hell it wants to your box which among other thing contains all the browser sessions and cookies :)
rawland 3 hours ago [-]
pi.dev, local model, (RAG-ed) copy of archwiki. You are more able than you believe. Already now, no permission needed.
couscouspie 3 hours ago [-]
How is Hermes different in that regard?
Also note, that RAG and even vector search are more paths of the early days that didn't prove too valuable. Just let your agent search it directly and optionally create an index as a default entrypoint for common topics.
rawland 3 hours ago [-]
Fair points. Agreed.
embedding-shape 3 hours ago [-]
They're talking about letting the agent access the bluetooth stuff, not about where to get information/knowledge from.
trvz 3 hours ago [-]
Literally the same security risk.
jwrallie 3 hours ago [-]
Bluetooth is the one thing I had problems in the past on GNU/Linux, Windows, macOS, Android and iOS. Linux is the only mentioned platform where you could technically give Codex root and let it fix it :)
I guess OpenBSD is the only OS where I never had any problem with Bluetooth audio.
Muromec 2 hours ago [-]
My bluetooth jusy works actually. By the way I use arch
dml2135 2 hours ago [-]
Use NixOS, only give your model access to the config in a git repo, zero access to the actual host machine.
stcg 1 hours ago [-]
That is also what I do now (both with NixOs and Guix Os), both for personal computers and for servers.
- I inspect the agent's changes, and only apply them - at once - if they are OK. So I have no half applied bad changes to my system, and I can catch critical mistakes before they are applied.
- I can roll back the changes by just doing a `git revert` and reapplying
- The agent cannot read secrets or unrelated data, just config.
- The agent gets the full configuration of all systems at once, without having to maintain parallel documentation (which can get out of sync) or rediscover each time from scratch (access my running systems, for example with `ssh root@server`).
- It's harder for the agent to miss some aspect of the configuration, because it's all in my dotfiles. If it's not there, it's nowhere
cyanydeez 3 hours ago [-]
I just use a local model; its too dumb to hack into NSA just to fix my bluetooth.
BodyCulture 5 hours ago [-]
This will make it much easier to trap people into installing it without any isolation just to their primary user account or even make it run with admin privileges by default.
With the recent security related events we already see that it seems to be wide spread practice that many operators avoid the hassle of isolating their agents.
It is just an incredible cultural experience to see how quick stupidity gets accepted as a behavioural default.
fg137 2 hours ago [-]
At least on Windows/Mac, a significant number of users of this app are non developers, and you should tame your expectations about them handling things like "isolation".
Even for developers working on Linux, you'll be surprised how many have never run a docker command in their life.
usef- 4 hours ago [-]
The Linux version seems to use bubblewrap + seccomp for a "workspace sandbox" automatically, in addition to the auto mode and/or user approval.
A VM would be even better, but people could presumably run this in one if we manage to convince them of higher sandboxing in general ?
bloak 3 hours ago [-]
Bubblewrap gets a bit confused inside a Docker container. If anyone knows how to run Codex inside a Docker container on Linux without it constantly complaining about a broken bubblewrap, please tell.
embedding-shape 3 hours ago [-]
> If anyone knows how to run Codex inside a Docker container on Linux without it constantly complaining about a broken bubblewrap, please tell.
Why would you even use bubblewrap once it's running in a container? I've been running Codex in a container since it was publicly available, not even sure what you'd use bubblewrap for when you already separated codex from the rest of your filesystem?
ab71e5 41 minutes ago [-]
Doesn't it automatically use bwrap if it's installed (in the container in this case)?
justincormack 4 hours ago [-]
The cli does that already with codex on linux
wewewedxfgdf 31 minutes ago [-]
Why would they write this in electron instead of something closer to the metal I thought this is the whole point of AI.
23qsGa1 1 hours ago [-]
The testimonials at the bottom are all from AI companies.
Linux users are kind of averse to trojans. You should call it Back Orifice For Linux. You don't even have to change the OpenAI logo!
dankobgd 37 minutes ago [-]
so instead of using a browser, now i can use an app that is a browser. makes total sense
bloqs 16 minutes ago [-]
Why would I use this over browser version or CLI
cl3misch 6 minutes ago [-]
I prefer the CLI myself, but I could imagine:
- nicer diff rendering, and directly mentioning parts of a diff
- Latex rendering (pretty annoying in the CLI, you have to actively tell Codex it's running in a terminal and replace Latex syntax with UTF-8 glyphs)
yonatan8070 10 minutes ago [-]
Probably ecause OpenAI wants training data from PCs of people who are scared of CLIs as well
meerita 3 hours ago [-]
What's the benefit of working with this app, which eats insane amounts of memory, instead of Codex CLI?
fg137 2 hours ago [-]
Outside Linux, on Windows/Mac, plenty of non developers much prefer the "desktop UI" experience over CLI. Some can't work with CLIs at all.
Even with Linux, there are more people -- including many non software engineers -- that are installing Linux on their home computers and may be interested in this.
Bear in mind that HN users don't remotely resemble the general population, or even employees at a tech company -- there are lots of people in finance, business, legal etc who could potentially benefit from this.
scott01 43 minutes ago [-]
I’m a developer, daily driving Linux, and prefer GUI apps. Would’ve used Sublime Text if clangd plugin worked. Hence stuck with Emacs. Open Code GUI sucks compared to their TUI though.
yokoprime 1 hours ago [-]
i sometimes find myself using the desktop app on macos, but the CLI just clicks more with how i think and its more flexible too.
PunchyHamster 36 minutes ago [-]
Can we instead replace them with LLM ? Surely it woudl be much easier
TZubiri 5 minutes ago [-]
I think you can connect your phone and talk to codex remotely, so you can run programming prompts while afk
LiamPowell 2 hours ago [-]
Latex rendering, inline images, inline browser showing what it's clicking on, being able to view a spreadsheet and then select a region to reference in the conversation, clickable links when it references a specific line number with mouse-over previews, interactive inline visualisations.
There's probably more I don't remember too. In my opinion TUI apps are just silly. You don't get any of the advantages of it being just plain text because it's all wrapped in funny Unicode characters and at the same time the GUI capabilities are hamstrung by being text on a grid.
skandinaff 2 hours ago [-]
With claude, the difference I noticed is that you can run their cloud enviroment from GUI app, as well as connect to remote machine. Sure, remote connection is nothing interesting, but I'm not aware if claude cli can work with cloud based enviroment.
Also claude design is alvaliable on claude gui app.
But all of these can be accessed with the browser as well, only the local machine access is something that browser version doesn't have. But for that you can use cli...
Really mess of the tools they are shipping. Waiting (not) for Claude/Openai OS
CuriouslyC 1 hours ago [-]
I use it on my macbook. The computer use is pretty sweet.
It can be controlled from your phone once paired, and it lets you actually see agents that it orchestrates in the threads. Also if you use MCP Apps, it can integrate those into threads.
ComputerPerson 3 hours ago [-]
I'm only familiar with the Anthropic equivalent, but the cognitive load is different as opposed to necessarily better or worse. I have friends who prefer mousing around the UI.
Tabs for long-running often-compacted sessions is a difference I've noticed in emergent UX.
meerita 3 hours ago [-]
I use Claude Code CLI, Codex Cli. Both are really good, they don't eat memory like the GUI apps.
ComputerPerson 3 hours ago [-]
I use the CLI, too, but I enjoy watchinng people use the desktop apps. It seems like the desktop apps may be a little bit better suited for human-in-the-loop work. If you're already switching back and forth between a mouse, having an IDE running may make more sense.
The best feeling has to be in the CLI, in my oppinion. A low-stakes project where you can let ultracode runaway from you in the CLI is the most fun.
orphea 3 hours ago [-]
Adequate text editing is the main one for me.
PunchTornado 3 hours ago [-]
does the app eat more money that codex cli? I mean is there a difference in cost in asking via the app something vs the cli?
motbus3 47 minutes ago [-]
If gpt is so great as they say, why aren't they using their own operating system yet? They have all the resources they need to prove a point
Kinrany 1 hours ago [-]
I wonder why operating systems aren't integrating with browsers more.
The permission prompts after asking it to touch only 3 files are more concerning to me than Electron itself. An agent that can expand its access scope that easily needs a much clearer capability boundary, especially on a desktop where the user’s files are the real sandbox.
VortexLain 2 hours ago [-]
Heads up: unlike Codex CLI, Codex Desktop is proprietary, and thus can't be audited for Claude Code style hidden anti-user behavior.
fg137 2 hours ago [-]
A real issue we have run into is that "computer use" features, which is absolutely a big no-no at our company, can be enabled with a single click, and we cannot configure that.
torh 5 hours ago [-]
FYI; This link shows Codex based on your current OS. I get a norwegian landing page with a download link for Windows.
I am unable use non-CLI tools, so I don't care about this app. However, I have a question about codex CLI: currently I am using pi agent and I am happy with it, using codex CLI would give me some advantage?
satvikpendem 1 hours ago [-]
You're unable to use non CLI tools? How do you interact with the Internet then?
csymes 1 hours ago [-]
Didn't you hear, it's the year of lynx
ddxv 3 hours ago [-]
I think these styles of apps will be popular for OpenAI and Anthropic as they help solve some of their moat issues. The deeper you integrate someone's files into their app, the harder it will be to switch AIs
cyanydeez 3 hours ago [-]
ok, but you know these things are marketed as super products; it's pretty easy for me to use a local model to scale up almost any project on github. Why would this be an effective moat beyond "I use codex too!!"
healthycoder 52 minutes ago [-]
Why is this written in electron?
pdhborges 5 hours ago [-]
For someone who has not tried these desktop apps: what is the the advantage versus cli codex with some MPCs and multiple folders each one with their context files?
Gareth321 5 hours ago [-]
The same as an OS with a UI. Discoverability, fewer actions per activity, easier navigation, faster to learn/lower skill floor, etc. Some highlights:
1. Much better multi-agent orchestration. The app supervises many agents, with different project views and built-in git worktrees, so agents can work on isolated copies of the same repo. It's easy to jump between tasks and see changes. I recall OpenAI wrote that CLI was not designed around this style of work.
2. The app combines multiple terminals, file previews, PR-review workflows, SSH connections, an integrated browser, and page annotations. For front-end stuff, Codex can run the app in Codex for mockups/prototypes, then iterate inside the app. IMHO I think this is a much faster, more intuitive flow.
3. For long-running and recurring agent workflows, I think they're much easier to manage in the app. You get automations, review queues, persistent conversation context, future schedules, and auto resume for longer running tasks. E.g. CI failure summaries, issue triage, and release briefs.
You can do some of the above, to some degree, with varying levels of success in the CLI, but I think it's miles ahead in the app.
arminluschin 5 hours ago [-]
You get GUI niceties: a nice presentation of the output like inline markdown rendering including tables and images in a nice font. Input supports drag & drop, and I can actually navigate the input field the way I am used to (pointing and clicking, using keyboard shortcuts to jump to beginning of words / sentences).
Not sure what the most modern CLIs support, but for me just the ergonomics of a GUI text field alone are superior.
Pavilion2095 5 hours ago [-]
It's easier to use for most people. I don't think CLI and GUI programs target the same audience.
logicallee 5 hours ago [-]
I'm not ready to try this yet, since after some recent experiences[1] I've decided not to be at the cutting edge of new tools and models for a few weeks or months.
However, from the screenshots and description, I expect that you would have these advantages:
- History. Currently, if you type into the CLI (TUI) your intention and requests are captured in some transcripts, but not in conversational turns. If you want the history of what you typed into the cli/tui you would have to datamine it from transcripts. By contrast, on the screenshots you can see it is a simple conversation that's saved and easy to return to.
- Multiplatform. As per the announcement "Use Codex across ChatGPT, your editor, and the terminal", meaning that you could open the ChatGPT app on your phone and continue to interact with this. While this might not matter to you if you exclusively code while sitting in front of your computer, still, it helps you be able to stay on top of things if you are on mobile.
- Background tasks and autonomous work. It says you can schedule it to do things in the background (issue triage, alert monitoring). At the moment, it would only do this if you've asked either codex or another agent to build a harness for it that does so. (i.e. you could ask Claude to build a harness that calls Codex on some schedule or interval.)
These all seem pretty good and I look forward to starting to use it once it's been more battle-tested.
[1] notably, on the Anthropic side the Opus 5 regressions - I had to downgrade to Opus 4.8 as I found Opus 5 was unreliable. I currently use Opus 4.8 and Codex Sol 5.6.
TekMol 3 hours ago [-]
Does this mean it is possible to talk to Codex from ChatGPT on a mobile phone now?
When I tried that with the Codex CLI version on a Linux VM, I did not get it to work. Possibly because OpenAI only supports connecting ChatGPT to a desktop installation of Codex?
preek 3 hours ago [-]
I have a codex cli instance on a Debian VM connected to ChatGPT on iOS via SSH. That works since.. about a month and has pretty good UX. Before, I used the shellfish terminal and tmux which also worked really good, but to be honest (even though I'm a big terminal fan), ChatGPT on iOS sometimes has a smoother UX than a terminal.
TekMol 2 hours ago [-]
Are you sure ChatGPT on IOS connects directly to the VM? Or via a desktop as the middle man sitting somewhere?
If you really only use ChatGPT on IOS and a VM and nothing else, then I would be curious how you set that up. I do not see a "connect to codex via ssh" in my ChatGPT app. I only see "Connect to a desktop".
Oh HOLY MOLY! Now I see there is not only a "Remote" section in the app but also a "Connection" section where you can add an ssh connection. I need to try that.
Thanks!
mbrock 2 hours ago [-]
yes I use that exact feature constantly to use Codex on remote servers and it works great
OsrsNeedsf2P 3 hours ago [-]
I'd love to see the stats on how many Linux users want this. Most Linux usage probably comes from WSL/SSH'ing into servers, where they would use the CLI instead of a GUI. Even for the people who run Linux on the desktop, most probably prefer the terminal anyways
TZubiri 2 minutes ago [-]
It'd be nice for sending prompts from phone, although it is a whole lot of bloat for just that feature. Par for the course for the AI era, in order to do a thing first you must import the universe.
left-struck 32 minutes ago [-]
While it may not be the majority of Linux usage, there’s a pretty big uptake in Linux desktop these days, and there millions of people actively using Linux desktop distros
This is how I get ChatGPT on Windows to not absolutely suck.
Can just install it in WSL now and it's got buttery smooth performance vs. the Windows version
I blame AV hooks
varjag 2 hours ago [-]
Is there anything it can do that Codex CLI can't?
indy 59 minutes ago [-]
it can consume more of your RAM
manupati 4 hours ago [-]
Download it a few hours ago. I've been waiting a long time for linux and it is working fine in debian kvm via X11
auggierose 3 hours ago [-]
Does this mean that ChatGPT Desktop will run now also on Intel Macs?
lrvick 2 hours ago [-]
Are there really daily driver Linux users that want to run a proprietary gui based LLM solution that Sam Altman gets to keylog AND have full remote code execution on their system? This feels like trolling.
Meanwhile I am looking at a Crush client running beside neovim in a herdr session I am accessing via ssh to a machine in my garage with 4 local GPUs. I think we Linux users have got this without Sams help.
Havoc 3 hours ago [-]
Much prefer CLI because its easier to isolate
2 hours ago [-]
badcafe23423435 3 hours ago [-]
Why not create a separate account on Linux just for the agent?
This security measure should also be enabled by default. Many packages REQUIRE the creation of an account, but agents do not. Interesting.
wltr 5 hours ago [-]
If that’s an Electron app, what’s the difference with running it in the browser?
lwansbrough 5 hours ago [-]
Access to your computer
JPLeRouzic 5 hours ago [-]
That's why I won't download that tool.
tristanj 5 hours ago [-]
Access to your computer is the entire point of the app. Codex computer use can script and control any application on your computer.
You can give it any task on your computer and it can automate it.
Such as creating a photo on Photoshop, creating 3D models, editing videos, or browsing any website without scripting.
fsflover 3 hours ago [-]
What about running it in a virtual machine?
Gareth321 5 hours ago [-]
Honestly, you're missing out. The productivity gains I've had with these tools is unbelievable. I understand the risk though, so if you've got government sensitive data on your computer, or no backups, don't use the "full access" option. Babysit what it does instead.
dmortin 4 hours ago [-]
Isn't it expensive, though? If you let it perform gui or web tasks for you using vision, I'd think it consumes lots of tokens.
Closi 3 hours ago [-]
Depends how much you are using it - for a casual user the $20 tier gives you just about enough use for hobby projects etc.
Or if you are doing full time development then you just need to pony up for the 20x tier if you want to use it.
Running Codex locally removes so much friction and is so fast compared to either running it on the web (where it has to build environments online etc which consumes time) or compared to copy-pasting chatgpt that it's just a no-brainer.
zorked 3 hours ago [-]
I don't know about Chatgpt but I used Kimi (they have a Chinese-only plugin that does desktop control - works fine if you enable it even if you don't know Chinese). Observing how it works, it's mostly using the accessibility features of the user interfaces - it fetches a sort of DOM for the desktop applications. Only rarely it has to take a screenshot.
margorczynski 4 hours ago [-]
Can you give some examples? I'm evaluating where/how I could use stuff like this.
vineyardmike 4 hours ago [-]
Literally everything from generic coding agent to shopping.
I run it in a MacOS vm, fwiw, for certain tasks. I usually hand it a repo and say “install all build dependencies” and it’ll click through installation GUIs where necessary. I wonder if the TOS of an application is enforceable if a bot agreed and a human never saw it.
It can UI test web apps if that’s part of your job, but it can also just use the browser for tasks. I’ve had it research flights by checking different dates automatically and compiling the results for me. I’ve heard others use it to handle building a shopping cart for instacart/grocery delivery.
Probably the hero usecase for most people would be app/web development. It can control either a browser or a device simulator and can iteratively build and test the application, by clicking real buttons.
shevy-java 4 hours ago [-]
> Literally everything from generic coding agent to shopping.
People need help with shopping now?
ccozan 3 hours ago [-]
ooh, chatGPT is really good in filtering bullshit and recommending the products that really fit.
For serious stuff, is part of the shopping flow.
WASDx 4 hours ago [-]
I upgraded my workflow a few months ago from "copy-paste things in and out of ChatGPT" to "use an agent that edits my project files and runs tests on its own" and the ergonomics are just so much better and enables automating bigger tasks. I still monitor everything it does and do manual adjustments so I feel ownership of the code.
margorczynski 3 hours ago [-]
But isn't that use-case solved a harness like OpenCode or Codex? OpenClaw and Hermes are a bit different beast although they can also be used for development in a more holistic manner (e.g. automated GUI testing).
I'm just wondering about other uses where such a system would be useful aside from asking it via Signal or WA for the weather.
WASDx 3 hours ago [-]
Right. I'm also curious about those use cases. I don't want an AI clicking through my mailbox.
SillyUsername 5 hours ago [-]
None that I can see - I already have it installed as a chrome app on my Mint desktop, and it seems identical.
martin- 5 hours ago [-]
Does the Chrome app have access to your local files, like when you're working on a code project?
fg137 2 hours ago [-]
Or running local commands or talking to an MCP server at a random domain unrestricted by content policy
water-drummer 5 hours ago [-]
Why do you need nodejs if you can run javascript in the browser?
ksimukka 3 hours ago [-]
oh Electron, leave my ram alone.
linzhangrun 3 hours ago [-]
I tried it yesterday. The experience seems smoother than on Windows. I hope Computer Use will be added soon.
Also, when will OpenAI fix the issue where Xhigh and Ultra are both translated as “极高” in Chinese? It’s been this way for quite some time. As far as I know, the proportion of Chinese employees at these Silicon Valley AI companies is quite high.
SweetSoftPillow 3 hours ago [-]
You have "send feedback" button in the app. Something tells me that it's much better place to report issues with the app rather than comment section on unrelated website.
schafberg 3 hours ago [-]
I think their backend data probably shows that very few Chinese users are using Codex through the official way, and the number of those who have switched to the Chinese interface is even smaller, so there’s not much incentive to fix this issue.
djyde 2 hours ago [-]
Because all Chinese users must use a VPN to access Codex.
linzhangrun 3 hours ago [-]
I don’t think GPT-5.6 would make such a basic mistake when reviewing CodeX itself.
szundi 3 hours ago [-]
[dead]
RinatNabiev 1 hours ago [-]
[dead]
78787 2 hours ago [-]
[dead]
shevy-java 4 hours ago [-]
Do people really use that? It seems horrible to turn your computer into a spydevice for AI slop spammers.
villgax 6 hours ago [-]
people good w/ linux would not have been holding their breath for companies which keep intelligence for a premium & h0st@ge depending on policy
0xB0D 3 hours ago [-]
Plague of AI slop.
A senior engineer in an Open Source project told me "I haven't looked at code in months"
- Electron based app: Electron is a framework sold on the basis of enabling rapid cross-platform development at the cost of performance.
- Frontier AI company: AI is sold on the basis of enabling rapid development
- App was released in February & took 6 entire months to port to Linux
Though as someone who shipped commercial software on Linux, it wasn't that bad, you just had to ship everything other than the kernel.
Don't they have agent swarms with infinite tokens?
That was after I asked it to only touch 3 text files in its working directory, after which it sparked macOS permission prompts to access my Desktop, Documents, Downloads, and other apps' data. Thank god for the web platform and web apps.
They can be amazing. But you can write shitty code in them like anywhere else.
Not even a $1T dollar company wants to maintain a native Swift Mac app even though they have AI models to build native apps for every platform.
Maybe they thought Electron would save them tokens to build the feature once and it works everywhere rather than spending more tokens on building the same feature on 3 platforms.
What better way to showcase their tools capabilities than to deliver apps that are native, efficient, and integrate well with the host system? By compromising with Electron and making mediocre, bloated software they are signaling that they just aren't there yet.
It would be like Ford buying Hondas for their company cars. It might save them money but it sends the wrong message.
Give it a full desktop in a VM if you want to, just not direct access to your system.
It created 2 new users and then assigned new NTFS permissions for every single file under my user directory to them. This of course wrecked havoc, ssh refused to work, several applications refusing to start and a ton of permission errors. It did this without even a warning in the background and it also does not undo any of it when you uninstall it.
It took around 3 hours to fix it by updating ~10 million NTFS permissions for every single file under my user directory.
I’ve been using Codex in full access mode constantly for the past couple months on a Pro plan and I haven’t had a single incident like this. I’ve used it across macOS, Linux, and Windows as well, so my usage isn’t limited to a specific setup either.
https://medium.com/conquering-corporate-america/10-tricks-to...
It’s a prison of your own making.
I’ve personally adopted a process where I structure my projects to ALWAYS keep credentials and sensitive information in a separate directory.
The working copy gets rsynced to and from a dedicated VM with whatever $HARNESS.
And for your hypothetical client.
Especially as judging by your description they despite this allow any VSCode plugin to be installed alongside it.
> and I am not making my life miserable to work with editors lacking the specific tools
And that’s the self-imposed prison I was talking about, there’s always alternative tools. In my mind a specific tool is something like Ghidra.
Also in the news: https://www.whitehouse.gov/presidential-actions/2026/08/expa...
Since we now have three "Codex"es, I think it's worth specifying you're talking about codex-cli/tui. Codex the hosted version and Codex the GUI are both fully proprietary I think (besides the codex-cli/tui parts they use, I'm guessing mainly the app-server stuff).
Or we are just assuming that was a PR stunt, which it almost certainly was.
Either way, this shit isn’t getting near my system.
No.
> Or we are just assuming that was a PR stunt, which it almost certainly was.
It wasn't.
> Either way, this shit isn’t getting near my system.
Sounds about right.
Manual tool calls. I ask AI to give me all the necessary reconnaissance commands, then I run them myself on the host and paste the output on the terminal with the SSH connection into the guest virtual machine where the harness is running. The AI then either figures it out and gives me the answer or runs additional tool calls by me. Repeat until annoying task is done, interrupt if anything suspicious shows up at any point.
If you can’t make that judgement call because of lack of knowledge/familiarity it’s okay - spawn a new fresh chat, get up to speed on the topic first and then resume.
That way you accomplish three things: you learn something new, you fix your problem and you don’t let a Trojan do whatever the hell it wants to your box which among other thing contains all the browser sessions and cookies :)
Also note, that RAG and even vector search are more paths of the early days that didn't prove too valuable. Just let your agent search it directly and optionally create an index as a default entrypoint for common topics.
I guess OpenBSD is the only OS where I never had any problem with Bluetooth audio.
- I inspect the agent's changes, and only apply them - at once - if they are OK. So I have no half applied bad changes to my system, and I can catch critical mistakes before they are applied.
- I can roll back the changes by just doing a `git revert` and reapplying
- The agent cannot read secrets or unrelated data, just config.
- The agent gets the full configuration of all systems at once, without having to maintain parallel documentation (which can get out of sync) or rediscover each time from scratch (access my running systems, for example with `ssh root@server`).
- It's harder for the agent to miss some aspect of the configuration, because it's all in my dotfiles. If it's not there, it's nowhere
With the recent security related events we already see that it seems to be wide spread practice that many operators avoid the hassle of isolating their agents.
It is just an incredible cultural experience to see how quick stupidity gets accepted as a behavioural default.
Even for developers working on Linux, you'll be surprised how many have never run a docker command in their life.
A VM would be even better, but people could presumably run this in one if we manage to convince them of higher sandboxing in general ?
Why would you even use bubblewrap once it's running in a container? I've been running Codex in a container since it was publicly available, not even sure what you'd use bubblewrap for when you already separated codex from the rest of your filesystem?
Linux users are kind of averse to trojans. You should call it Back Orifice For Linux. You don't even have to change the OpenAI logo!
- nicer diff rendering, and directly mentioning parts of a diff
- Latex rendering (pretty annoying in the CLI, you have to actively tell Codex it's running in a terminal and replace Latex syntax with UTF-8 glyphs)
Even with Linux, there are more people -- including many non software engineers -- that are installing Linux on their home computers and may be interested in this.
Bear in mind that HN users don't remotely resemble the general population, or even employees at a tech company -- there are lots of people in finance, business, legal etc who could potentially benefit from this.
There's probably more I don't remember too. In my opinion TUI apps are just silly. You don't get any of the advantages of it being just plain text because it's all wrapped in funny Unicode characters and at the same time the GUI capabilities are hamstrung by being text on a grid.
It can be controlled from your phone once paired, and it lets you actually see agents that it orchestrates in the threads. Also if you use MCP Apps, it can integrate those into threads.
Tabs for long-running often-compacted sessions is a difference I've noticed in emergent UX.
The best feeling has to be in the CLI, in my oppinion. A low-stakes project where you can let ultracode runaway from you in the CLI is the most fun.
1. Much better multi-agent orchestration. The app supervises many agents, with different project views and built-in git worktrees, so agents can work on isolated copies of the same repo. It's easy to jump between tasks and see changes. I recall OpenAI wrote that CLI was not designed around this style of work.
2. The app combines multiple terminals, file previews, PR-review workflows, SSH connections, an integrated browser, and page annotations. For front-end stuff, Codex can run the app in Codex for mockups/prototypes, then iterate inside the app. IMHO I think this is a much faster, more intuitive flow.
3. For long-running and recurring agent workflows, I think they're much easier to manage in the app. You get automations, review queues, persistent conversation context, future schedules, and auto resume for longer running tasks. E.g. CI failure summaries, issue triage, and release briefs.
You can do some of the above, to some degree, with varying levels of success in the CLI, but I think it's miles ahead in the app.
However, from the screenshots and description, I expect that you would have these advantages:
- History. Currently, if you type into the CLI (TUI) your intention and requests are captured in some transcripts, but not in conversational turns. If you want the history of what you typed into the cli/tui you would have to datamine it from transcripts. By contrast, on the screenshots you can see it is a simple conversation that's saved and easy to return to.
- Multiplatform. As per the announcement "Use Codex across ChatGPT, your editor, and the terminal", meaning that you could open the ChatGPT app on your phone and continue to interact with this. While this might not matter to you if you exclusively code while sitting in front of your computer, still, it helps you be able to stay on top of things if you are on mobile.
- Background tasks and autonomous work. It says you can schedule it to do things in the background (issue triage, alert monitoring). At the moment, it would only do this if you've asked either codex or another agent to build a harness for it that does so. (i.e. you could ask Claude to build a harness that calls Codex on some schedule or interval.)
These all seem pretty good and I look forward to starting to use it once it's been more battle-tested.
[1] notably, on the Anthropic side the Opus 5 regressions - I had to downgrade to Opus 4.8 as I found Opus 5 was unreliable. I currently use Opus 4.8 and Codex Sol 5.6.
When I tried that with the Codex CLI version on a Linux VM, I did not get it to work. Possibly because OpenAI only supports connecting ChatGPT to a desktop installation of Codex?
If you really only use ChatGPT on IOS and a VM and nothing else, then I would be curious how you set that up. I do not see a "connect to codex via ssh" in my ChatGPT app. I only see "Connect to a desktop".
Oh HOLY MOLY! Now I see there is not only a "Remote" section in the app but also a "Connection" section where you can add an ssh connection. I need to try that.
Thanks!
Can just install it in WSL now and it's got buttery smooth performance vs. the Windows version
I blame AV hooks
Meanwhile I am looking at a Crush client running beside neovim in a herdr session I am accessing via ssh to a machine in my garage with 4 local GPUs. I think we Linux users have got this without Sams help.
You can give it any task on your computer and it can automate it. Such as creating a photo on Photoshop, creating 3D models, editing videos, or browsing any website without scripting.
Or if you are doing full time development then you just need to pony up for the 20x tier if you want to use it.
Running Codex locally removes so much friction and is so fast compared to either running it on the web (where it has to build environments online etc which consumes time) or compared to copy-pasting chatgpt that it's just a no-brainer.
I run it in a MacOS vm, fwiw, for certain tasks. I usually hand it a repo and say “install all build dependencies” and it’ll click through installation GUIs where necessary. I wonder if the TOS of an application is enforceable if a bot agreed and a human never saw it.
It can UI test web apps if that’s part of your job, but it can also just use the browser for tasks. I’ve had it research flights by checking different dates automatically and compiling the results for me. I’ve heard others use it to handle building a shopping cart for instacart/grocery delivery.
Probably the hero usecase for most people would be app/web development. It can control either a browser or a device simulator and can iteratively build and test the application, by clicking real buttons.
People need help with shopping now?
For serious stuff, is part of the shopping flow.
I'm just wondering about other uses where such a system would be useful aside from asking it via Signal or WA for the weather.
A senior engineer in an Open Source project told me "I haven't looked at code in months"
In which case what TF is it you even do ?