惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

aimingoo的专栏
aimingoo的专栏
雷峰网
雷峰网
博客园 - 叶小钗
V
V2EX
博客园 - Franky
博客园_首页
小众软件
小众软件
Microsoft Security Blog
Microsoft Security Blog
The GitHub Blog
The GitHub Blog
A
About on SuperTechFans
H
Hackread – Cybersecurity News, Data Breaches, AI and More
阮一峰的网络日志
阮一峰的网络日志
WordPress大学
WordPress大学
Blog — PlanetScale
Blog — PlanetScale
J
Java Code Geeks
T
The Blog of Author Tim Ferriss
U
Unit 42
Microsoft Azure Blog
Microsoft Azure Blog
月光博客
月光博客
S
SegmentFault 最新的问题
B
Blog RSS Feed
博客园 - 【当耐特】
D
Docker
N
Netflix TechBlog - Medium

Artificial Intelligence in Plain English - Medium

OpenAI launched GPT-5.5 - it’s the death of digital hand-holding The Future of Agentic AI is Not One Genius Model, it is a Team How AI Development Optimizes Smart Parking Management Systems The FAST Framework: A Practical Responsible AI Checklist for Data Scientists Why is Cloud Migration Consulting Important for Businesses? My Team Caught Me Using AI to Merge PRs. The Code Was Fine. The Trust Wasn’t. SQL Tricks Every Data Scientist Should Know I Stopped Chasing AI Hype and Started Building Systems That Actually Worked GPT-5.5: The Model That Thinks Ahead Mastering AI Storytelling: Crafting Prompts for Captivating Narratives Why So Many Businesses Are Switching to Clawdbot for AI Automation The Growing Dependence on AI Tools — And Why It’s Risky How to Cut Claude Code Costs by At least 2 to 3x How The Google Antigravity Agent Hallucinated NSFW Adult Websites? “Vercel Hack Exposed: How a Simple AI Tool Led to a $2M Data Breach” The Vercel Hack: How One AI Tool Cracked Open the Internet’s Deployment Stack AI Chatbot Development Services for Enterprise Data-Sensitive Processes What AI Agent Developers Should Consider When Designing Agents for High-volume Environments My ChatGPT Responds Better Than Yours, Here is the 3-Step Guide How To Create A Custom AI Chatbot, Train & Deploy It In 48 Hrs Learning in the Age of Intelligent Systems: Why Human Understanding Still Matters Everyone Is Learning AI, So Why Will Most Still Fail? AI Is Learning Faster Than You Think What If Your Next Best Friend Is a Robot That Even Feels Real? OpenAI Quietly Broke the Way You Build AI Apps The AI Superpower Standoff: Why the OpenAI vs. Anthropic War Looks Exactly Like the US vs. Iran The LLM Tools That Actually Matter in Production (Not LangChain, Not the OpenAI SDK) The Most Dangerous Use of Artificial Intelligence Yet! | AI Porn Why Your AI Chatbot Gives Vague Answers (And Why That Should Matter to You) How Do You Prove You’re You, After AI Has Evolved?
Kiro-cli on Windows: Security Risks and Safety Best Pract...
Sanjeevkumar · 2026-04-26 · via Artificial Intelligence in Plain English - Medium
Using Kiro-cli on a Windows laptop requires caution. While the tool itself is a legitimate AI-powered developer assistant (heavily integrated with AWS and agentic workflows), there are significant security and stability considerations specifically for Windows users. 1. Compatibility and Native Support The most important thing to know is that Kiro-cli does not currently have a native Windows version. * The Gap: Official documentation and GitHub issues confirm support is primarily for macOS and Linux. The Risk: Windows users typically have to run it via WSL (Windows Subsystem for Linux) . Running a CLI tool that has “agentic” powers (the ability to run commands on your behalf) through a compatibility layer can lead to path-resolution errors. 2. The “Nuke” Risk (Command Hallucination) There have been documented cases of Kiro-cli causing severe system damage on Windows due to how it interprets file paths. Path Confusion: Because Windows uses backslashes (\) and Linux/WSL uses forward slashes (/), the AI can occasionally "hallucinate" or misformat a command. Recursive Deletion: In a widely reported incident, an escaping error in a tool call caused Kiro to attempt a recursive delete that hit critical system directories (like C:\Windows\WinSxS) instead of a local project folder. 3. Permission and Security Controls Kiro-cli is “agentic,” meaning it can read files and execute terminal commands. By default, it has certain “trusted” permissions that you should harden immediately: 4. How to use it SAFELY on Windows If you decide to use it, follow these “best practices” to protect your laptop: Use WSL with Isolation: Run Kiro-cli inside a WSL2 instance. Do not mount your entire C: drive to that instance. Only map the specific project folder you are working on. The “Untrust” Habit: Manually set the CLI to “untrust” file reads by adding alias kiro-cli="kiro-cli --untrust-fs-read" to your shell profile. Review Every Tool Call: Kiro will often show you a “plan” or a command it wants to run. Do not skim this. Look for any rm -rf, del, or chmod commands that look broader than they should be. Prefer the IDE: Kiro’s IDE (Desktop App) actually has native Windows support and is generally considered more stable on Windows than the CLI version. The Verdict: It is “secure” in the sense that it isn’t malware, but it is operationally risky on Windows. Use it inside a restricted WSL environment rather than trying to force it to run natively or with high-level system permissions. Q: Can I install Kiro-CLI directly on windows 11? Ans: Technically, no , you cannot install Kiro-CLI directly as a native Windows application (like a .exe or via PowerShell) as of April 2026. While the Kiro IDE supports Windows 11 natively, the CLI version is currently restricted to Linux and macOS. However, you can still use it on Windows 11 by using WSL2 (Windows Subsystem for Linux) . References Installation - IDE - Docs - Kiro https://dev.to/aws/the-essential-guide-to-installing-amazon-q-developer-cli-on-windows-lmh#:~:text=Update,Linux%2C%20or%20wsl%20for%20short . Privacy and security - CLI - Docs - Kiro Downloads “Writing can sometimes feel like shouting into a void, but your support is the echo that keeps me going. If my words have ever sparked a thought or a smile, drop a comment below. Your encouragement is the fuel that keeps my pen moving! ✍️✨” — Sanjeev A message from our Founder Hey, Sunil here. I wanted to take a moment to thank you for reading until the end and for being a part of this community. Did you know that our team run these publications as a volunteer effort to over 3.5m monthly readers? We don’t receive any funding, we do this to support the community. If you want to show some love, please take a moment to follow me on LinkedIn , TikTok , Instagram . You can also subscribe to our weekly newsletter . And before you go, don’t forget to clap and follow the writer️! Kiro-cli on Windows: Security Risks and Safety Best Practices was originally published in Artificial Intelligence in Plain English on Medium, where people are continuing the conversation by highlighting and responding to this story.