Rendered at 19:55:23 GMT+0000 (Coordinated Universal Time) with Cloudflare Workers.
pentagrama 2 hours ago [-]
Interesting to see the Linux version released. On Windows, though, my experience with the new ChatGPT app since Codex was folded into it hasn't been great.
I'm a Codex user, and when it was still a standalone app it worked really well for me. Since it became part of the new ChatGPT app, the app feels noticeably slower and, at least on my machine, is currently using around 1.27 GB of RAM [1].
The old ChatGPT app, which has now been renamed "ChatGPT Classic", feels much faster and is using around 478 MB under the same conditions.
I have a reasonably powerful PC, so the difference is pretty noticeable. I assume Classic will eventually be discontinued, but so far the transition to the new app on Windows hasn't been particularly good for me.
Does openai still require a biometric check to use any model more recent than GPT 4? If so, I imagine that will be an impediment for the typical person who runs linux.
For someone who has not tried these desktop apps: what is the the advantage versus cli codex with some MPCs and multiple folders each one with their context files?
Gareth321 12 hours ago [-]
The same as an OS with a UI. Discoverability, fewer actions per activity, easier navigation, faster to learn/lower skill floor, etc. Some highlights:
1. Much better multi-agent orchestration. The app supervises many agents, with different project views and built-in git worktrees, so agents can work on isolated copies of the same repo. It's easy to jump between tasks and see changes. I recall OpenAI wrote that CLI was not designed around this style of work.
2. The app combines multiple terminals, file previews, PR-review workflows, SSH connections, an integrated browser, and page annotations. For front-end stuff, Codex can run the app in Codex for mockups/prototypes, then iterate inside the app. IMHO I think this is a much faster, more intuitive flow.
3. For long-running and recurring agent workflows, I think they're much easier to manage in the app. You get automations, review queues, persistent conversation context, future schedules, and auto resume for longer running tasks. E.g. CI failure summaries, issue triage, and release briefs.
You can do some of the above, to some degree, with varying levels of success in the CLI, but I think it's miles ahead in the app.
KronisLV 7 hours ago [-]
> The app supervises many agents, with different project views and built-in git worktrees, so agents can work on isolated copies of the same repo. It's easy to jump between tasks and see changes.
This is mostly true with Codex and Claude Code Desktop, but gets a bit trickier with 3rd party tools.
I tried out some others and both Paseo and Kepler felt a little bit clunky especially around sub-agents and workflows (even if they let me have both OpenCode and Claude Code with different providers in the same UI). And OpenCode is plain lovely in the terminal but sorta okay in the browser: compare its display of sub-agents to what Claude Code does, for example; their tabbed interface also feels a tad less pleasant than the vertical menu of projects + sessions that most others are settling on, not their old look with icon per project, that was worse. There's definitely ample room for better tooling, then again early IDEs were far worse, so hopefully ADEs will get more polish eventually!
Still, regardless of what you use and across how many providers, it's nice to have everything in a single familiar interface, if you need that.
jtrn 3 hours ago [-]
Nonono. You are supposed to pile one with negativity and point out everything that is bad with it!!
You get GUI niceties: a nice presentation of the output like inline markdown rendering including tables and images in a nice font. Input supports drag & drop, and I can actually navigate the input field the way I am used to (pointing and clicking, using keyboard shortcuts to jump to beginning of words / sentences).
Not sure what the most modern CLIs support, but for me just the ergonomics of a GUI text field alone are superior.
Pavilion2095 12 hours ago [-]
It's easier to use for most people. I don't think CLI and GUI programs target the same audience.
logicallee 12 hours ago [-]
I'm not ready to try this yet, since after some recent experiences[1] I've decided not to be at the cutting edge of new tools and models for a few weeks or months.
However, from the screenshots and description, I expect that you would have these advantages:
- History. Currently, if you type into the CLI (TUI) your intention and requests are captured in some transcripts, but not in conversational turns. If you want the history of what you typed into the cli/tui you would have to datamine it from transcripts. By contrast, on the screenshots you can see it is a simple conversation that's saved and easy to return to.
- Multiplatform. As per the announcement "Use Codex across ChatGPT, your editor, and the terminal", meaning that you could open the ChatGPT app on your phone and continue to interact with this. While this might not matter to you if you exclusively code while sitting in front of your computer, still, it helps you be able to stay on top of things if you are on mobile.
- Background tasks and autonomous work. It says you can schedule it to do things in the background (issue triage, alert monitoring). At the moment, it would only do this if you've asked either codex or another agent to build a harness for it that does so. (i.e. you could ask Claude to build a harness that calls Codex on some schedule or interval.)
These all seem pretty good and I look forward to starting to use it once it's been more battle-tested.
[1] notably, on the Anthropic side the Opus 5 regressions - I had to downgrade to Opus 4.8 as I found Opus 5 was unreliable. I currently use Opus 4.8 and Codex Sol 5.6.
VCFundedGenYer 7 hours ago [-]
Nobody should be installing or using AI apps. Your browser is as far as they should go.
Reminder that the macOS app went from "this is fairly well made" to "it downloads multiple gigabytes of random things and doesn't follow any design conventions nor standards"
The Linux app will fail the same tests.
eatsyourtacos 2 hours ago [-]
Uhh.. you can't do what codex/claude can do from a browser. Are you this out of the loop?
eimrine 1 hours ago [-]
Copying webpages with no advanced knowledge? I really can not do this in any other ais except google.
BodyCulture 12 hours ago [-]
This will make it much easier to trap people into installing it without any isolation just to their primary user account or even make it run with admin privileges by default.
With the recent security related events we already see that it seems to be wide spread practice that many operators avoid the hassle of isolating their agents.
It is just an incredible cultural experience to see how quick stupidity gets accepted as a behavioural default.
fg137 9 hours ago [-]
At least on Windows/Mac, a significant number of users of this app are non developers, and you should tame your expectations about them handling things like "isolation".
Even for developers working on Linux, you'll be surprised how many have never run a docker command in their life.
pjmlp 6 hours ago [-]
A proof that normies just can't handle security is that when OS X came to be, many Mac OS users used to ask how to disable the root/regular user dichotomy.
Or the long process to educate Windows users, and developers as well, to not run as Administrator.
usef- 12 hours ago [-]
The Linux version seems to use bubblewrap + seccomp for a "workspace sandbox" automatically, in addition to the auto mode and/or user approval.
A VM would be even better, but people could presumably run this in one if we manage to convince them of higher sandboxing in general ?
bloak 10 hours ago [-]
Bubblewrap gets a bit confused inside a Docker container. If anyone knows how to run Codex inside a Docker container on Linux without it constantly complaining about a broken bubblewrap, please tell.
embedding-shape 10 hours ago [-]
> If anyone knows how to run Codex inside a Docker container on Linux without it constantly complaining about a broken bubblewrap, please tell.
Why would you even use bubblewrap once it's running in a container? I've been running Codex in a container since it was publicly available, not even sure what you'd use bubblewrap for when you already separated codex from the rest of your filesystem?
ab71e5 8 hours ago [-]
Doesn't it automatically use bwrap if it's installed (in the container in this case)?
krzyk 7 hours ago [-]
Don't install bubblewrap? I didn't and use codex in docker.
bloak 5 hours ago [-]
"Codex could not find bubblewrap on PATH. Install bubblewrap with your OS package manager. See the sandbox prerequisites: ... Codex will use the bundled bubblewrap in the meantime."
I think neither the bundled bubblewrap nor the Ubuntu 24.04 bubblewrap works properly under Docker with the default options ... Yes, I've just tested that by asking Codex to "Test that bubblewrap is working properly" and then "Test again" after apt-get install bubblewrap.
EDIT: So the solution is to run "codex --dangerously-bypass-approvals-and-sandbox" in a Docker container?
sh34r 4 hours ago [-]
You have to add Linux capabilities to support creating nested namespaces. IIRC SYS_ADMIN is required. If you do that, what do you think you’re achieving with the container? It defeats the entire purpose IMO, just makes development more inconvenient.
If you need the sandboxing capabilities provided by the application and don’t want to run it on the host, you should set up a VM, not a container.
From a systems perspective, it’s foolish to rely on a proprietary application to provide its own isolation guarantees. This is an OS-layer responsibility.
ML/AI experts suffer badly from hubris. They are brilliant in one domain. It transfers poorly to systems engineering. The proof is in the FelonyBench results.
justincormack 11 hours ago [-]
The cli does that already with codex on linux
miguel-muniz 6 hours ago [-]
Unrelated to this Linux release but I've been using the new ChatGPT desktop app since I annoying updated on accident, and I haven't had that great of an experience.
I previously really enjoyed the Codex app. It was easy for me to understand and find what I needed. The conversation view provided the right amount of information without feeling too concise or full of jargon and the typographic hierarchy made it easy to skim. The project based workflow made sense for my needs.
Ever since they combined all ChatGPT into one app though it has become a mess. It's trying to do too much in one. The settings menu is especially bloated, and I find the UI to be too complicated for the simple questions I'm asking outside of development work. I would rather just use the web interface for general use at this point. They've also been updating much of the UI to follow the same patterns as Claude, and I've not been impressed with the Claude desktop app.
To me, they are taking multiple steps backwards. I hope they eventually find their way again.
wuliwong 2 hours ago [-]
My biggest gripe is now anytime I open a new session it hangs and I see the beachball spinner (mac) for a while before I can actually use the app again. It's pretty brutal.
lucideer 10 hours ago [-]
The most remarkable things about this announcement:
- Electron based app: Electron is a framework sold on the basis of enabling rapid cross-platform development at the cost of performance.
- Frontier AI company: AI is sold on the basis of enabling rapid development
- App was released in February & took 6 entire months to port to Linux
SyneRyder 9 hours ago [-]
I guess it's easier to solve Erdos problems and improve the lower bound of the Riemann hypothesis, than it is to solve Linux desktop app distribution.
dingaling911 9 hours ago [-]
LOL!
Though as someone who shipped commercial software on Linux, it wasn't that bad, you just had to ship everything other than the kernel.
boutell 7 hours ago [-]
LOL. Conveniently, electron is everything other than the kernel. Also, as much wasted RAM as an entire second instance of chrome that shares nothing, but oh well.
palmotea 6 hours ago [-]
> LOL. Conveniently, electron is everything other than the kernel. Also, as much wasted RAM as an entire second instance of chrome that shares nothing, but oh well.
Well, with RAM being so cheap, why bother trying to trying to be memory efficient? It's not like OpenAI has an infinite pool of "AI" software engineers to work on this...
Oh wait...
dingaling911 7 hours ago [-]
Yeah, but if you use Qt like I did, you're shipping libstdc++, some other crap and Qt.
timcobb 7 hours ago [-]
Yeah, I was kind of surprised recently that there's no solid native way to build desktop apps on Linux! I was thinking I'd build something actually native with AI but then the options were QT or or gtk...
preg_match 6 hours ago [-]
Qt is as solid as it gets. It's very, very high quality. Much higher quality than Microsoft's frameworks on Windows.
timcobb 4 hours ago [-]
Well yes, I was surprised by the situation in Windows too! So my stack is now split like this
- Apple: SwiftUI/AppKit
- Android: Jetpack
- Windows + Linux: Avalonia (C#)
Avalonia seems good so far. I couldn't do Qt because I can't deal with that qBittorrent look. GTK is aesthetically pleasing for me, but it only runs on Linux. Avalonia lets me target both of these UI-toolkit-less platforms with something native-ish. Flutter is probably good too, but I am using uniffi-rs and that doesn't generate Dart bindings AFAIK.
Would love to hear other options.
andai 3 hours ago [-]
Isn't Qt themeable? I also recall at one point they "emulated" native widget look and feel in their own renderer but I might be misremembering.
rubymamis 4 hours ago [-]
Indeed! I wrote my note-taking app with a block editor (like Notion) in Qt with QML for the UI and C++ for the logic and it's been an incredible experience![1]
How would you know? It's impossible to have done a thorough analysis of all the Windows UI frameworks, five have been released since I started typing...
disiplus 7 hours ago [-]
You don't care what were you trying to build but for a quick me alone Linux app I used Flutter.
Honestly it's my go-to when I want to have a quick native app on any platform but dont want to bundle electron.
thewebguyd 4 hours ago [-]
Flutter is solid choice, and Canonical seems to be putting weight behind it for Ubuntu as well. Canonical is also now the new lead maintainer of Flutter Desktop.
blep-arsh 5 hours ago [-]
QT and GTK are as native (and solid, I guess) as it gets, since there's no "default" UI toolkit that's shipped along with the kernel, unlike e.g. Windows or macOS. Speaking of Windows, why do they even ship browser-UI apps as a part of the OS? Do they find native Windows UI development too hard or feature-limited even with LLM assistance?
thewebguyd 4 hours ago [-]
Because Microsoft screwed up their native UI story. They are slowly starting to go native again with WinUI3, but Microsoft went through a rough period with UI frameworks, I mean how many do they have now all still "supported"? WinForms, WPF, MFC, WinUI, MAUI, etc.?
ilikehurdles 6 hours ago [-]
Well what does native mean? An XWindow? Native on gnome is different from native on kde or xfce or lxde…
bpfrh 5 hours ago [-]
I mean there is the no true linux argument, but covering the main stream desktops you basically have kde which is written with qt(so qt is native) or gnome which is written with gtk and both frameworks/DEs do implement other things besides "just" the gui, so you are native.
alightsoul 57 minutes ago [-]
Yes... Just use DEB package files for any distro. Make a compatibility layer that is distro dependent so that it can come preinstalled on any distro. It converts the DEB package to a distro native package so that it doesn't fuck up existing packages or the existing distro-native package manager, and gives you the apt and dpkg commands . Unlike appimages and flatpaks it has no reviewer, no store and it can be installed just like EXEs on windows which is already the case for DEBs on debian and debian based distros. Would this work?
OroPla 6 hours ago [-]
Microsoft used to ship a Linux binary for Teams, but they stopped doing that. Guess the tech was lost.
onraglanroad 2 hours ago [-]
It sucked.
Download Edge for Linux and use the PWA. It's still crap but at least it kind of works mostly.
freedomben 4 hours ago [-]
I'm not usually one to defend Microsoft, but since Teams works great in a browser, I actually prefer it that way. My video conference doesn't need access to my whole filesystem and an opacity layer that prevents me from seeing what it does. I actually applaud them for supporting browsers as well as they do.
glitchc 6 hours ago [-]
Yes, except it only worked some of the time on some of the distros (mainly Ubuntu/Debian variants of a certain vintage).
miohtama 6 hours ago [-]
With the AI, we can finally have the year of desktop Linux.
3abiton 5 hours ago [-]
Nonetheless, it's the year og the linux desktop!
MichaelZuo 6 hours ago [-]
Yeah idk what OpenAI was thinking. Just going off their own claims… OpenAI must be filled with bozos to not be able to utilize their own supposed product capabilities…
scrollop 6 hours ago [-]
Same with Anthropic and their "support" team, which seems to be Claude 0.1 run on a commodore 64 in the basement...
PunchyHamster 8 hours ago [-]
It's the exact opposite. They picked the easiest way, done countless times just fine by everyone else and still failed
odiroot 8 hours ago [-]
AppImage, yawn.
sedawkgrep 8 hours ago [-]
I think they were joking...
alightsoul 52 minutes ago [-]
What problems are there with appimages?
cassepipe 7 hours ago [-]
Yet I have to install a not very famous, maybe unmaintained daemon to get basic system integration
alightsoul 53 minutes ago [-]
It is already pre installed in most distrosk
darkwater 10 hours ago [-]
Exactly my thoughts! I was expecting a Rust app written from scratch available at least in Qt and GTK flavors , and maybe with a third and a fourth option.
Don't they have agent swarms with infinite tokens?
concinds 10 hours ago [-]
They replaced a pretty decent native Swift Mac app (with only some chronic state management bugs), weighing ~100MB ish, with the Codex app that most people don't need, made in Electron, which takes minimum 5GB+ including filesystem cruft. Today I ran into a memory leak that froze the app and made the Renderer process take 5GB, then 10GB of RAM.
That was after I asked it to only touch 3 text files in its working directory, after which it sparked macOS permission prompts to access my Desktop, Documents, Downloads, and other apps' data. Thank god for the web platform and web apps.
lukan 8 hours ago [-]
"Thank god for the web platform and web apps."
They can be amazing. But you can write shitty code in them like anywhere else.
jerf 5 hours ago [-]
Browsers fundamentally chew on RAM for breakfast.
AIUI the reason is, "we", collectively even though we don't all work on them, optimize browsers for speed above almost all else. Then, when all the advertising websites on the internet consume all that speed, we can't go back and have to optimized for speed even harder. All that optimizing for speed ends up consuming lots of RAM, from all the images, the speed-optimize DOM with lots of cross-linking, the JIT and its generation of native code paths, the endless layers of caches, etc. etc. at every point where a browser can choose between RAM and speed it will choose speed unless it's just impossible to choose it for some reason.
So even if you write good code in Electron, it still tends to eat resources like candy.
On the plus side, if you write good code, you will pick up all those optimizations too, which is not necessarily all bad. Running something like VSCode at all is a powerful testament to the browser ecosystem now. IDEs do a lot of very heavy duty lifting and need a lot of performance to do all their work. But you can imagine that when the same text rendering system that enables all that fancy & fast syntax highlighting and all the other decorations and features in the editor window is used to display a preview of a markdown file that said preview is probably going to eat way more RAM than your instincts may have guessed.
concinds 8 hours ago [-]
But they're strictly sandboxed and won't muck up my local filesystem.
rvz 9 hours ago [-]
> They replaced a pretty decent native Swift Mac app (with only some chronic state management bugs), weighing ~100MB ish, with the Codex app that most people don't need, made in Electron.
Not even a $1T dollar company wants to maintain a native Swift Mac app even though they have AI models to build native apps for every platform.
Maybe they thought Electron would save them tokens to build the feature once and it works everywhere rather than spending more tokens on building the same feature on 3 platforms.
criddell 8 hours ago [-]
Works everywhere except Linux for a long time.
What better way to showcase their tools capabilities than to deliver apps that are native, efficient, and integrate well with the host system? By compromising with Electron and making mediocre, bloated software they are signaling that they just aren't there yet.
It would be like Ford buying Hondas for their company cars. It might save them money but it sends the wrong message.
thewebguyd 4 hours ago [-]
Yeah that's what gets me. If, according to them, "software development is a solved problem" then there's no reason they can't make native, efficient, well integrated apps for each platform. If the problem is solved, just have the AI do it! If it's truly as advanced and accelerating as they claim, then there's no need for electron anymore.
zwirbl 8 hours ago [-]
Maybe they are drinking their own kool-aid, resulting in less then optimal choices and worse software for everyone and everything
kaycey2022 6 hours ago [-]
What! They replaced the native mac app with this?!
jonizzle 9 hours ago [-]
I hate the new app aswell but you can still get the old one called ChatGPT Classic. Just scroll down to the bottom of the download site.
awakeasleep 9 hours ago [-]
Its unmaintained and has glaring bugs (cant adjust thinking level) for a month now
kilroy123 8 hours ago [-]
Yup, this pisses me off so much. I now just go to the web app instead of using this broken app.
mgambati 8 hours ago [-]
It’s apple fault that swift and swift ui is completely garbage.
olavgg 8 hours ago [-]
I have already created a croos-platform solitaire game in Rust with Opus 4.5. Done in one evening. I absolutely do not understand why OpenAI could not write a proper application in 6 months. Do they struggle to use the product they sell?
8 hours ago [-]
shuvrojit 8 hours ago [-]
I am thinking about this too. I mean they have access to the highest level models and still they just produced a garbage.
hombre_fatal 5 hours ago [-]
They probably just don't see it worth the extra effort. And maybe they want to keep it in sync with the web UI.
It definitely is a fraction of the work these days to maintain three different desktop apps + two different mobile apps + a web app. But it's still a lot more work than an Electron app that is merely tweaked between platforms.
randusername 7 hours ago [-]
I was under the impression electron is chosen less because of broad cross-platform concerns and more because chat apps, specifically, require a level of care in text rendering that nobody really wants to design from first principles when they can just piggy back on web technologies.
But I wouldn't know first-hand.
lucideer 7 hours ago [-]
Text rendering is:
1. generally done well by many different UI frameworks
2. generally done better by most popular native UI frameworks than what Electron provides
BUT - those UI frameworks are typically not (very) cross-platform. In that context, Electron provides one of the best unified text-rendering stories of cross-platform options. But definitely far from the best overall.
mitchchn 2 hours ago [-]
> App was released in February & took 6 entire months to port to Linux
Product releases at large companies are slowed dow by coordination and resources more than actual development. (I'm an Electron maintainer who is currently working on better Linux support in the framework, and also a developer/PM for a commercial app that supports Linux.)
It's very likely that the Codex Electron app already "worked" on Linux back in February, as in someone internally could build and run it from source and start a chat session. That fact would have made it possible for a small team to make a business case and start getting support from ops, QA, CS, marketing, legal, etc. The engineers would spend their unlimited tokens on Linux-specific build, packaging, and platform integrations (remember this is a computer use agent) to take the app from a prototype to something a company could actually launch and support for millions of users.
Apps are also a moving target. The entire time building up to release, the Linux desktop app would have been getting feature and design updates for free from the updates going out on Mac/Windows/web. None of those other teams working on those features have have had the time (or the mandate) to coordinate with Linux engineers if they were building a separate app from scratch, and I suspect such a proposal would never have gotten off the ground.
lucideer 1 hours ago [-]
I work in a large corp, I know how these things work - my company has taken longer to do simpler things than this. My observation wasn't to call this out as unusual or unexpected.
I think you've summarised it really well, & it shows:
- the revolutionary promises of AI-driven rapid delivery is nonsense when the delivery bottleneck was always elsewhere - AI is speeding up the part that was never slow
- the fact that - as you point out - it was likely working in Feb but needed a business case gives a good impression of the leadership's approach to Linux support: it's likely such internal case-making will continue to be a factor in future Linux build maintained
yokoprime 8 hours ago [-]
Wonder how many will bother using the desktop version on linux. Im on macos and i just use the CLI most of the time
jrflo 4 hours ago [-]
The desktop app is actually really good (esp on macos). I used to be CLI only, but after trying it recently it's super convenient. Much easier to manage multiple projects simultaneously and it has a built in diff viewer, file browser/reader, terminal, side chat interface, etc.
xbmcuser 9 hours ago [-]
well this just shows how good the AI is at programming
sh34r 4 hours ago [-]
The most remarkable thing is that it was built at all. What self-respecting Linux desktop user wouldn’t be satisfied with the TUI?
It is a marketing expense. We are talking about it. Surely the token cost was worthwhile on that basis alone. Students will likely get some usage out of it, too. But paying a human to do this port would have been an insane thing to do two years ago. I’d be surprised if they have more than 1000 MAUs for this client by the end of the year.
headrick 8 hours ago [-]
How are you doing testing for desktop apps? any tool recommendation?
Muromec 10 hours ago [-]
Corporate it is a scam pretending to be a job creation program to make sure people dont get funny ideas
bibimsz 6 hours ago [-]
i doubt the UI was the hard part. these desktop apps are about computer use. thats where the tricky bits are.
sonu27 8 hours ago [-]
6 months is way too long IMHO
Beijinger 4 hours ago [-]
Not sure what I should see under the Link provided. Here is another one:
So much negativity... I like the desktop app and am looking forward to testing it out.
danmaz74 2 hours ago [-]
I've been using it to vibe code a personal application while I'm using a more "powerful" setup for my main agent assisted coding, and I have to say that it's been very good so far. I just wished that it was easier to hand off some tasks to codex web, like I tried to do today as I was starting a boat trip.
moronicles 2 hours ago [-]
Remote alone makes the desktop app worth it.
ninkendo 7 hours ago [-]
Sitting at 2.2GB of combined resident RAM across 11 processes. I haven't done a single query yet.
ChadNauseam 2 hours ago [-]
Is this a linux issue? My Macbook has 16gb ram and running out has literally never been an issue for me. I'm using all of it + 10gb of swap and my computer feels snappy and fast. Chrome with 100+ tabs, discord, slack, codex, chatgpt, all running simultaneously with no issues. Sure, all other things being equal less RAM usage is better, but I can understand why reducing it isn't a priority for them.
alightsoul 49 minutes ago [-]
The OS doesn't matter here. The problem is that it's an electron app, hence it has high ram usage
geodel 6 hours ago [-]
But you might. And Codex is taking your threats seriously and stand prepared in case you breach protocol and start using your computer resources for your own nefarious purpose.
These apps stands as last defense between users and legitimate owners of compute resources that is electron and pals.
reaperducer 2 hours ago [-]
Sitting at 2.2GB of combined resident RAM across 11 processes. I haven't done a single query yet.
Surely they can just vibe is down to a reasonable footprint, right? Right?
orsenthil 4 hours ago [-]
Congrats on supporting Linux. It makes the ecosystem more rich. Hope they will continue to maintain it and provide parity support.
Kinrany 9 hours ago [-]
I wonder why operating systems aren't integrating with browsers more.
alightsoul 49 minutes ago [-]
Chromebooks do this and people avoid them
cloudie78 11 hours ago [-]
Reminder to everyone, treat these as trojans. Run them isolated from the rest of your system.
Give it a full desktop in a VM if you want to, just not direct access to your system.
debazel 9 hours ago [-]
And that's not a joke, I made the mistake of installing this on my Windows machine just to test it out quickly last week.
It created 2 new users and then assigned new NTFS permissions for every single file under my user directory to them. This of course wrecked havoc, ssh refused to work, several applications refusing to start and a ton of permission errors. It did this without even a warning in the background and it also does not undo any of it when you uninstall it.
It took around 3 hours to fix it by updating ~10 million NTFS permissions for every single file under my user directory.
takoid 8 hours ago [-]
I would love to see your prompt(s) and how you managed to make it do this.
I’ve been using Codex in full access mode constantly for the past couple months on a Pro plan and I haven’t had a single incident like this. I’ve used it across macOS, Linux, and Windows as well, so my usage isn’t limited to a specific setup either.
debazel 7 hours ago [-]
I never sent any prompts to it, it did all of this during the installation. Here is one related GitHub issue I found for it https://github.com/openai/codex/issues/12343 Looks like they don't intend to change this.
ac29 7 hours ago [-]
Your earlier post is misleading, since "it" sounds like the model, not the installer. (of course if the latter was created by the former, its basically the same complaint, but I suspect what you are talking about was a deliberate design decision by a human)
Stagnant 6 hours ago [-]
The problem doesn't exist when granting codex full access. Codex makes you choose upon first launch to "Set up default sandbox" or to "Use non-admin sandbox". The default option creates two new users and messes with NTFS permissions.
HumblyTossed 7 hours ago [-]
I'm taking the person you are replying to as being snarky. But, I believe OP is right, treat these with zero trust.
TacticalCoder 6 hours ago [-]
> I’ve been using Codex in full access mode constantly for the past couple months on a Pro plan and I haven’t had a single incident like this. I’ve used it across macOS,
That is not how it works: the "but it works for me" is a logical fallacy.
Haven't you followed a bit all the posts about models, for example, escaping their environments?
The "but it works for me" is a random data point: an anecdote.
That there are people / companies where models ran wild and destroyed files / messed up projects is a fact.
When there are documented cases of stuff gone wrong, people must find ways to protect their data.
We literally see posts frontpage, daily, about AI sandboxing and we regularly see posts about AI escapes or AI SNAFUs.
And you come and post "show me your prompt, for it works on my machine"...
semyonsh 9 hours ago [-]
At that point I'd rather re-install the whole machine. Beats 3 hours of wrangling NTFS permissions and inheritance.
nehal3m 8 hours ago [-]
If you’re doing that anyway you might as well install a hypervisor and layer your OS on top. That way you can snapshot before your LLM with root fucks everything up again.
CamelCaseName 8 hours ago [-]
Sorry, what was the problem we were originally trying to solve again?
spider-mario 8 hours ago [-]
“Guys, guys, guys, can we take a step back here?
What problem are we really trying to solve?”
Living a meaningful life. My yak has too much hair though.
kaycey2022 6 hours ago [-]
I've been using GPT through opencode for quite some time on linux. I have had a great time with getting it to help me through computer use and it has been a game changer for me.
For instance recently, media downloads on my NAS became quite a bit slower. I asked it to investigate and it quickly got back to me saying the issue was the ethernet link had been downgraded to 100Mbps from 1Gbps. It even went through journalctl to tell me when this had happened. To fix it I just had to plug an ethernet cable out and back in. Now this is the kind of thing, earlier I would have to spend an evening on. But given an open system like Linux, a well made safe model just makes it so much more accessible than having to RTFM for one off things I am sure to forget in a month.
I dont really let it run loose through my systems, and keep an eye on the thinking traces it puts out and the permissions it asks for. But now I dont have to slog through manuals and deal with gruff people on the internet. I can choose to do so after the fact, depending on how much free time and curiosity I have.
nnevatie 7 hours ago [-]
Was the prompt "fuck up my system, please." or how did you manage this? I've used Codex for ages without any of these kinds of issues.
debazel 7 hours ago [-]
It did it during the installation process.
TaupeRanger 8 hours ago [-]
Skill issue honestly
c7b 7 hours ago [-]
Not sure if that makes it better or worse.
robbru 8 hours ago [-]
Freaking wow.
pjmlp 9 hours ago [-]
With exception of VSCode, because I have no choice due to some plugins, or apps required by customer projects where I have no other option as well, nothing else based on Electron pollutes my computers.
cloudie78 8 hours ago [-]
You always have a choice to use/learn/make a different tool.
It’s a prison of your own making.
I’ve personally adopted a process where I structure my projects to ALWAYS keep credentials and sensitive information in a separate directory.
The working copy gets rsynced to and from a dedicated VM with whatever $HARNESS.
pjmlp 8 hours ago [-]
If I have to deliver in technology X, customer isn't going to be happy getting Y instead, and I am not making my life miserable to work with editors lacking the specific tools, or that are forbidden by customer IT to be installed on provided equipment.
cloudie78 8 hours ago [-]
If your hypothetical client as security measure ONLY permits VSCode on a dedicated box you’re obligated to work on and have no control over - then I pray for you.
And for your hypothetical client.
Especially as judging by your description they despite this allow any VSCode plugin to be installed alongside it.
> and I am not making my life miserable to work with editors lacking the specific tools
And that’s the self-imposed prison I was talking about, there’s always alternative tools. In my mind a specific tool is something like Ghidra.
pjmlp 7 hours ago [-]
I see you never worked in enterprise consulting with either laptops or cloud VMs managed by customer IT, and where elevated actions require either IT tickets, or elevation tools with description fields why the operation is required, with development done with specific team accounts.
cloudie78 5 hours ago [-]
Quite on the contrary, in fact.
Sectors involved in, in no particular order: government, financial, telecom, energy (gas and electric), manufacturing (large european conglomerates), healthcare, logistics
In fact I was the one usually helping IT Teams put the torture devices and policies you’re subjected to in place lol.
Banks would usually give us laptops with smart card readers and only allowed access to their VPN from a limited set of public IP addresses.
Govt was a bit more lax, but same principles applied, was really fun doing any kind of work over a laggy VNC.
My favourite one was probably where you’d have to hop from one Azure cloud VM, to Citrix to a bastion windows box, off of which you’d RDP to the actual work VM only to putty to the actual damn Linux box you cared about.
Energy sector was more lax, they let us set up a GitLab instance and a small
CICD setup to which we’d push the code developed on our local boxes.
Oh and the ones I mentioned - they usually ask us what tools we wanted on our boxes as well.
joquarky 5 hours ago [-]
Why would anyone lack enough dignity to sign up for working in that kind of environment?
I would rather live in a shopping cart tent under a bridge.
pjmlp 2 hours ago [-]
Well those wishes will be served to all of us thanks to work automation m
HumblyTossed 7 hours ago [-]
> You always have a choice to use/learn/make a different tool.
Weak argument. People don't have infinite time. People just want tools they trust and that aren't enshitified.
cloudie78 5 hours ago [-]
Trust and VSCode don’t go together in the same sentence lol
p-e-w 8 hours ago [-]
Many official, high-quality language support plugins are only available for VSCode. For some languages, you have a “choice” to use another IDE in the same sense that you have a choice to do programming with a hex editor. Lean being an example, where every alternative is in its infancy.
cloudie78 5 hours ago [-]
It’s called LSP, any good editor supports it.
In fact, VSCode’s support for Lean is via LSP anyways.
fragmede 11 hours ago [-]
How do I get it to fix my Bluetooth if I do that? If you've been AI-pilled, 2026 is the year of Linux desktop because instead of dicking around with config files, I can just tell AI to fix python.
matheusmoreira 9 hours ago [-]
> How do I get it to fix my Bluetooth if I do that?
Manual tool calls. I ask AI to give me all the necessary reconnaissance commands, then I run them myself on the host and paste the output on the terminal with the SSH connection into the guest virtual machine where the harness is running. The AI then either figures it out and gives me the answer or runs additional tool calls by me. Repeat until annoying task is done, interrupt if anything suspicious shows up at any point.
Muromec 5 hours ago [-]
Or just give it shell and it dies it all by itself
cloudie78 8 hours ago [-]
If you want to be security conscious don’t give it access to your system directly. Ask it to guide you through the information gathering part of the problem solving process and use your brain and judgment if it actually needs the information/data it’s attempting to access.
If you can’t make that judgement call because of lack of knowledge/familiarity it’s okay - spawn a new fresh chat, get up to speed on the topic first and then resume.
That way you accomplish three things: you learn something new, you fix your problem and you don’t let a Trojan do whatever the hell it wants to your box which among other thing contains all the browser sessions and cookies :)
rawland 11 hours ago [-]
pi.dev, local model, (RAG-ed) copy of archwiki. You are more able than you believe. Already now, no permission needed.
couscouspie 10 hours ago [-]
How is Hermes different in that regard?
Also note, that RAG and even vector search are more paths of the early days that didn't prove too valuable. Just let your agent search it directly and optionally create an index as a default entrypoint for common topics.
rawland 10 hours ago [-]
Fair points. Agreed.
embedding-shape 10 hours ago [-]
They're talking about letting the agent access the bluetooth stuff, not about where to get information/knowledge from.
trvz 10 hours ago [-]
Literally the same security risk.
jwrallie 10 hours ago [-]
Bluetooth is the one thing I had problems in the past on GNU/Linux, Windows, macOS, Android and iOS. Linux is the only mentioned platform where you could technically give Codex root and let it fix it :)
I guess OpenBSD is the only OS where I never had any problem with Bluetooth audio.
ac29 7 hours ago [-]
I haven't had bluetooth issues in years, but I did have an agent reverse engineer a smartphone app that was required for programming some BT headphones. Now I can push my desired runtime settings automatically to the headphones when they connect to my computer
So, yes, I would say agents are pretty good at working with Bluetooth on Linux
nope1000 8 hours ago [-]
Recently I had some crashes on my system and claude correctly diagnosed it to a broken SATA cable on my hard drive. That was really practical
Muromec 10 hours ago [-]
My bluetooth jusy works actually. By the way I use arch
dml2135 9 hours ago [-]
Use NixOS, only give your model access to the config in a git repo, zero access to the actual host machine.
stcg 9 hours ago [-]
That is also what I do now (both with NixOs and Guix Os), both for personal computers and for servers.
- I inspect the agent's changes, and only apply them - at once - if they are OK. So I have no half applied bad changes to my system, and I can catch critical mistakes before they are applied.
- I can roll back the changes by just doing a `git revert` and reapplying
- The agent cannot read secrets or unrelated data, just config.
- The agent gets the full configuration of all systems at once, without having to maintain parallel documentation (which can get out of sync) or rediscover each time from scratch (access my running systems, for example with `ssh root@server`).
- It's harder for the agent to miss some aspect of the configuration, because it's all in my dotfiles. If it's not there, it's nowhere
cyanydeez 10 hours ago [-]
I just use a local model; its too dumb to hack into NSA just to fix my bluetooth.
perching_aix 11 hours ago [-]
They ship with their own sandboxing by default, and Codex specifically is open source.
rawland 11 hours ago [-]
I’d wait. Remember when Chromium downloaded and installed binary blobs.
"The American private sector is the most innovative and
technologically advanced in the world, and its scale,
speed, and capacity secure a critical offensive cyber
advantage for the United States."
embedding-shape 10 hours ago [-]
> and Codex specifically is open source.
Since we now have three "Codex"es, I think it's worth specifying you're talking about codex-cli/tui. Codex the hosted version and Codex the GUI are both fully proprietary I think (besides the codex-cli/tui parts they use, I'm guessing mainly the app-server stuff).
9 hours ago [-]
wahnfrieden 11 hours ago [-]
This app is NOT open source
avazhi 9 hours ago [-]
Is this the same thing that broke out of the sandbox and into HuggingFace?
Or we are just assuming that was a PR stunt, which it almost certainly was.
Either way, this shit isn’t getting near my system.
perching_aix 9 hours ago [-]
> Is this the same thing that broke out of the sandbox and into HuggingFace?
No.
> Or we are just assuming that was a PR stunt, which it almost certainly was.
It wasn't.
> Either way, this shit isn’t getting near my system.
Sounds about right.
avazhi 1 hours ago [-]
> > Or we are just assuming that was a PR stunt, which it almost certainly was.
> It wasn't.
Prove it. But you can’t, which is problematic for you.
Nobody should believe anything OpenAI says about anything. They either lied about it breaking out of a sand box, or they’re incompetent by building a sandbox their AI could break out of.
It’s a cute story, though.
9 hours ago [-]
badcafe23423435 11 hours ago [-]
if it is open source why no exist any fork? why I can remove openai model default from instalation?
runtime_lens 9 hours ago [-]
The permission prompts after asking it to touch only 3 files are more concerning to me than Electron itself. An agent that can expand its access scope that easily needs a much clearer capability boundary, especially on a desktop where the user’s files are the real sandbox.
dankobgd 8 hours ago [-]
so instead of using a browser, now i can use an app that is a browser. makes total sense
AdriaanvRossum 6 hours ago [-]
I find it almost funny how hostile the response is when a company actually goes through the effort of supporting Linux. Apparently shipping the Linux version is only step one, you also need to pick the right framework, use the right packaging, consume the right amount of RAM, and preferably rewrite it natively.
krelian 6 hours ago [-]
HN comment quality took a nosedive recently, You can predict the comments just based on the story, almost all of them cynical and snarky remarks. It used to be a place to come and learn from technical experts.
crims0n 5 hours ago [-]
I don't have evidence for this, but I suspect a lot of it is Reddit refugees.
runarberg 4 hours ago [-]
We live in an era where companies are increasingly hostile towards their users and society at large. Where regulation has been stripped or ignored to maximize the profits of a handful of monopolies, where companies don‘t even have to pretend to care about their customers anymore, nor the usability of their product. Seemingly companies don‘t even bother to test their products anymore before selling it to their customers. And companies that engage in the most consumer hostile behavior are the ones who are most rewarded for that behavior.
I think this cynicism is more then warranted. If anything HN is not cynical enough to meet the times we are in.
2afTq 6 hours ago [-]
The AI boosters have driven away all experts. They are either financially invested or mindless power users on the level of the proverbial MacOS fanboys.
Experts related to real programming topics are gone or silent. AI experts have never even been here in the first place. It is all about Electron apps, prompts, agents and other bullshit.
joquarky 5 hours ago [-]
This started before AI. I'd pin it on the crypto gold rush attracting knuckle-dragging brogrammers into the industry.
HR is charmed by them despite their lack of discipline.
lemagedurage 6 hours ago [-]
A challenge of releasing tech on a platform of people that are picky about tech.
2afTq 6 hours ago [-]
Spinning this as a generous Linux port misses the elephant in the room: This is spyware that drags your system down to the level of Windows.
TacticalCoder 6 hours ago [-]
> I find it almost funny how hostile the response is when a company actually goes through the effort of supporting Linux.
How magnanimous: they make the effort to support the OS their entire company is based on? It's not just for training the model and hosting them: it's also to run them, where they constantly use Linux to do their thing.
Without Linux, there's no OpenAI.
So I take it the Linux community should be so grateful that OpenAI supports Linux, right?
tredre3 4 hours ago [-]
> Without Linux, there's no OpenAI.
They use Linux because it's there. If Linux wasn't there, they'd use what's there. There is nothing about Linux that makes it unique enough to be make or break OpenAI. Not one thing.
And yes, when a company distributes their app for the Linux desktop, we should be grateful or at the very least not hostile.
The attitude of Linux zealots is honestly tiresome and it makes us all look bad.
qw1238z 37 minutes ago [-]
First they stole all of our code, then they sell it back to us, then they release a data exfiltration tool.
And we should be "grateful"?
The corporate fascism here becomes scary. People here would work for IG Farben and discuss how to disrupt Zyklon-B and make it more efficient.
givinguflac 6 hours ago [-]
It’s almost like we Linux users are opinionated about software. Weird.
/s
OsrsNeedsf2P 11 hours ago [-]
I'd love to see the stats on how many Linux users want this. Most Linux usage probably comes from WSL/SSH'ing into servers, where they would use the CLI instead of a GUI. Even for the people who run Linux on the desktop, most probably prefer the terminal anyways
left-struck 8 hours ago [-]
While it may not be the majority of Linux usage, there’s a pretty big uptake in Linux desktop these days, and there millions of people actively using Linux desktop distros
TZubiri 7 hours ago [-]
It'd be nice for sending prompts from phone, although it is a whole lot of bloat for just that feature. Par for the course for the AI era, in order to do a thing first you must import the universe.
telotortium 6 hours ago [-]
That was already supported from your phone by using SSH, using the app server feature of the Codex CLI. The Codex desktop app is more for computer use, browser control, and the UI paradigm of GUI, which is overall just richer and better than a TUI, albeit more heavyweight.
TZubiri 6 hours ago [-]
Do you have a link for those docs? I either missed that, or it seemed like a too complex feature.
One of the issues with this new trend of vibecoding a million features, is that the (vibecoded) docs are labrynths of new features, and features that are deprecated or redundant with 2 month younger features.
But I can’t tell from these docs if the ChatGPT desktop app needs to remain running on your macOS/Windows host as a proxy, or if you can directly SSH from your phone to your Linux box with just Codex CLI.
TZubiri 3 hours ago [-]
Oh, I thought you were telling me because you actually did it, not because you read it could be done.
When I tried it a couple of months ago, the CLI version didn't have that feature, it's only present on the desktop app. The docs you linked seem to confirm this:
>In the ChatGPT mobile app, open Remote to work with ChatGPT or Codex chats on a connected Mac or Windows device.
>Start in the ChatGPT desktop app on the host you want to connect.
>Open the ChatGPT desktop app on the host. Go to Settings > Connections > Control this Mac or PC,
Then there's the SSH thing
>Use an SSH host or managed remote development environment when the project already lives in a remote environment. Connect the desktop app host to that environment first;
>For SSH setup details, see connect to an SSH host.
At this point I feel that I need to combine it with other experimental vibecoded features? And the end result would be something that I can hack together with some ddns reverse polling thing. I know I can download an ssh terminal to my phone and connect to my computer by either opening a port, or doing some wacky network stuff. I don't see the value add in doing that by adding the commands I would have to run to some openai config file yaml like
> ssh-tunnel: tailscale
> port: 8411
instead of making a bash script with
> tailscale -p 8411
tl;dr: The feature is desktop app dependent, and the desktop app is now on linux, rejoice
DefamationStati 2 hours ago [-]
Finally! My shitbox Surface 8 pro that's running Debian will be pleased.
ddxv 11 hours ago [-]
I think these styles of apps will be popular for OpenAI and Anthropic as they help solve some of their moat issues. The deeper you integrate someone's files into their app, the harder it will be to switch AIs
cyanydeez 10 hours ago [-]
ok, but you know these things are marketed as super products; it's pretty easy for me to use a local model to scale up almost any project on github. Why would this be an effective moat beyond "I use codex too!!"
motbus3 8 hours ago [-]
If gpt is so great as they say, why aren't they using their own operating system yet? They have all the resources they need to prove a point
hk__2 7 hours ago [-]
Because it would be stupid to do so?
mentos 7 hours ago [-]
I’ve got a long running chat in the Windows app that becomes completely unresponsive for minutes on end. Complete travesty.
bloqs 8 hours ago [-]
Why would I use this over browser version or CLI
cl3misch 7 hours ago [-]
I prefer the CLI myself, but I could imagine:
- nicer diff rendering, and directly mentioning parts of a diff
- Latex rendering (pretty annoying in the CLI, you have to actively tell Codex it's running in a terminal and replace Latex syntax with UTF-8 glyphs)
yonatan8070 8 hours ago [-]
Probably ecause OpenAI wants training data from PCs of people who are scared of CLIs as well
cmrdporcupine 7 hours ago [-]
As others have said, there's all sorts of things an HTML renderer can do better than terminal: proper (not hacked) image handling on both input and output, rendering graphical results, graphs, better code highlighting and diffs, interactive elements, etc. But one thing that strikes me as especially important: a proper accessibility story with magnification, screen reader, TTS etc.
All the stuff people are hacking into TUIs is honestly a bit silly, they're actually very inefficient for high fidelity UIs. Having worked in it and on it before while @ GOOG, the actual renderer in Chromium is an optimized thing of beauty. It really makes sense to leverage it. Appropriately.
But all of the above could (should) be done as a locally hosted web page via the existing codex CLI launching a local web server... rather than shipping an electron binary with its own entire fork of Chromium.
delduca 5 hours ago [-]
On macOS, the version made for Apple Silicon in Swift was abandoned (now it called ChatGPT-classic until they decide to kill it) to this garbage in Electron.
VortexLain 9 hours ago [-]
Heads up: unlike Codex CLI, Codex Desktop is proprietary, and thus can't be audited for Claude Code style hidden anti-user behavior.
fg137 9 hours ago [-]
A real issue we have run into is that "computer use" features, which is absolutely a big no-no at our company, can be enabled with a single click, and we cannot configure that.
wewewedxfgdf 8 hours ago [-]
Why would they write this in electron instead of something closer to the metal I thought this is the whole point of AI.
luca-ctx 3 hours ago [-]
I made something similar using Tauri but there were visual inconsistencies between platforms thanks to webkit. At the time I remember thinking I wish I had used electron to buy cross platform parity.
And I experimented with gpui from zed, that was even harder to work with.
Of course they could chase performance, but ultimately time to market is the #1 factor right now, and coding agents still aren't good enough to just immediately realize an entire GPUI app from scratch with nothing more than a figma design. Still requires a ton of oversight.
prmoustache 2 hours ago [-]
> visual inconsistencies between platforms
Why do you care? If I chose platform X over Z, that is potentially because I like the visual particularities of this platform.
super256 3 hours ago [-]
It's built on OWL, which is their own Chromium integration. It's not electron.
Seems pretty solid for Mac, but idk about Windows and Linux.
Because electron gets shit done? Aside the memory usage, electron/browser based applications of any complexity tend to be better and develop a lot faster.
sdevonoes 3 hours ago [-]
Users don’t like shit, though.
justmedep 3 hours ago [-]
More testing you still need good engineers for every native platform if you go native. We all know that AI in the hands of incompetent people is bad.
micheles 9 hours ago [-]
I am unable use non-CLI tools, so I don't care about this app. However, I have a question about codex CLI: currently I am using pi agent and I am happy with it, using codex CLI would give me some advantage?
satvikpendem 9 hours ago [-]
You're unable to use non CLI tools? How do you interact with the Internet then?
micheles 7 hours ago [-]
I don't consider the browser a tool.
csymes 8 hours ago [-]
Didn't you hear, it's the year of lynx
TekMol 10 hours ago [-]
Does this mean it is possible to talk to Codex from ChatGPT on a mobile phone now?
When I tried that with the Codex CLI version on a Linux VM, I did not get it to work. Possibly because OpenAI only supports connecting ChatGPT to a desktop installation of Codex?
preek 10 hours ago [-]
I have a codex cli instance on a Debian VM connected to ChatGPT on iOS via SSH. That works since.. about a month and has pretty good UX. Before, I used the shellfish terminal and tmux which also worked really good, but to be honest (even though I'm a big terminal fan), ChatGPT on iOS sometimes has a smoother UX than a terminal.
TekMol 9 hours ago [-]
Are you sure ChatGPT on IOS connects directly to the VM? Or via a desktop as the middle man sitting somewhere?
If you really only use ChatGPT on IOS and a VM and nothing else, then I would be curious how you set that up. I do not see a "connect to codex via ssh" in my ChatGPT app. I only see "Connect to a desktop".
Oh HOLY MOLY! Now I see there is not only a "Remote" section in the app but also a "Connection" section where you can add an ssh connection. I need to try that.
Thanks!
preek 6 hours ago [-]
You're welcome(;
Also for future readers: Yes, I'm sure there's no desktop app in the middle. I have dedicated remote VMs that run agents. I don't have them running on the desktop, not even as a middle man.
mbrock 9 hours ago [-]
yes I use that exact feature constantly to use Codex on remote servers and it works great
TekMol 4 hours ago [-]
You could just as well use any other coding agent via ChatGPT then, right?
that’s why i made a clone of macos libraries to compile SwiftUI to linux to make something like this faster (for non Electron!)
Artoooooor 7 hours ago [-]
About the damn time. Couldn't they vibe code the Linux version using the same very tool from the day one?
yodamus 6 hours ago [-]
Does this mean it's a matter of time until I can deploy codex on my raspberry pi now?
nateb2022 6 hours ago [-]
Codex CLI should have been usable for a while now, and you could also sign in to your ChatGPT subscription using Opencode which runs perfectly fine on a Raspberry Pi.
healthycoder 8 hours ago [-]
Why is this written in electron?
fassssst 6 hours ago [-]
It has a full web browser in it
pjmlp 6 hours ago [-]
Because apparently ChatGPT is not able to generate native apps, so desktop developers are safe. /s
manupati 12 hours ago [-]
Download it a few hours ago. I've been waiting a long time for linux and it is working fine in debian kvm via X11
lrvick 9 hours ago [-]
Are there really daily driver Linux users that want to run a proprietary gui based LLM solution that Sam Altman gets to keylog AND have full remote code execution on their system? This feels like trolling.
Meanwhile I am looking at a Crush client running beside neovim in a herdr session I am accessing via ssh to a machine in my garage with 4 local GPUs. I think we Linux users have got this without Sams help.
manishsharan 5 hours ago [-]
An often overlooked advantage of Electron based apps is they can convert any older version of laptop into a nice toaster oven.
This is fantastic as I can toast or reheat my frozen waffles on the same machine which is also running a agentic loop on codex desktop to cook my software.
meerita 11 hours ago [-]
What's the benefit of working with this app, which eats insane amounts of memory, instead of Codex CLI?
fg137 9 hours ago [-]
Outside Linux, on Windows/Mac, plenty of non developers much prefer the "desktop UI" experience over CLI. Some can't work with CLIs at all.
Even with Linux, there are more people -- including many non software engineers -- that are installing Linux on their home computers and may be interested in this.
Bear in mind that HN users don't remotely resemble the general population, or even employees at a tech company -- there are lots of people in finance, business, legal etc who could potentially benefit from this.
scott01 8 hours ago [-]
I’m a developer, daily driving Linux, and prefer GUI apps. Would’ve used Sublime Text if clangd plugin worked. Hence stuck with Emacs. Open Code GUI sucks compared to their TUI though.
ekzy 6 hours ago [-]
I prefer the CLI but the remote control with the phone app only works with the phone AFAIK, so that’s the only reason I use it.
yokoprime 8 hours ago [-]
i sometimes find myself using the desktop app on macos, but the CLI just clicks more with how i think and its more flexible too.
PunchyHamster 8 hours ago [-]
Can we instead replace them with LLM ? Surely it woudl be much easier
LiamPowell 9 hours ago [-]
Latex rendering, inline images, inline browser showing what it's clicking on, being able to view a spreadsheet and then select a region to reference in the conversation, clickable links when it references a specific line number with mouse-over previews, interactive inline visualisations.
There's probably more I don't remember too. In my opinion TUI apps are just silly. You don't get any of the advantages of it being just plain text because it's all wrapped in funny Unicode characters and at the same time the GUI capabilities are hamstrung by being text on a grid.
jampekka 3 hours ago [-]
I'm on codex TUI because the GUI options (and browser) slow to a crawl with long sessions, especially if they have math rendered.
skandinaff 9 hours ago [-]
With claude, the difference I noticed is that you can run their cloud enviroment from GUI app, as well as connect to remote machine. Sure, remote connection is nothing interesting, but I'm not aware if claude cli can work with cloud based enviroment.
Also claude design is alvaliable on claude gui app.
But all of these can be accessed with the browser as well, only the local machine access is something that browser version doesn't have. But for that you can use cli...
Really mess of the tools they are shipping. Waiting (not) for Claude/Openai OS
geysersam 5 hours ago [-]
I think one advantage is that you can control it remotely via the chatgpt mobile app. I don't know why they don't allow that for regular codex...
CuriouslyC 9 hours ago [-]
I use it on my macbook. The computer use is pretty sweet.
It can be controlled from your phone once paired, and it lets you actually see agents that it orchestrates in the threads. Also if you use MCP Apps, it can integrate those into threads.
ComputerPerson 11 hours ago [-]
I'm only familiar with the Anthropic equivalent, but the cognitive load is different as opposed to necessarily better or worse. I have friends who prefer mousing around the UI.
Tabs for long-running often-compacted sessions is a difference I've noticed in emergent UX.
meerita 10 hours ago [-]
I use Claude Code CLI, Codex Cli. Both are really good, they don't eat memory like the GUI apps.
ComputerPerson 10 hours ago [-]
I use the CLI, too, but I enjoy watchinng people use the desktop apps. It seems like the desktop apps may be a little bit better suited for human-in-the-loop work. If you're already switching back and forth between a mouse, having an IDE running may make more sense.
The best feeling has to be in the CLI, in my oppinion. A low-stakes project where you can let ultracode runaway from you in the CLI is the most fun.
orphea 10 hours ago [-]
Adequate text editing is the main one for me.
TZubiri 7 hours ago [-]
I think you can connect your phone and talk to codex remotely, so you can run programming prompts while afk
someplaceguy 7 hours ago [-]
You can do that with the Codex CLI/TUI as well.
PunchTornado 11 hours ago [-]
does the app eat more money that codex cli? I mean is there a difference in cost in asking via the app something vs the cli?
auggierose 11 hours ago [-]
Does this mean that ChatGPT Desktop will run now also on Intel Macs?
fectjtfs 4 hours ago [-]
OpenAI: With AI, you can build really good apps, really quickly! Fire your devs!
Also OpenAI: Aight look, Electron is the best that we can do at this point, take it or leave it.
If this isn’t enough to convince you how little truth there is in everything these companies claim, then you have been brainwashed entirely already.
Why aren’t we getting quality native apps on all platforms, released simultaneously, if these AI code monkeys are THAT good? Where are all these amazing experiences built with AI that these guys keep promising?
I guess an Electron monstrosity is about as far as it can go.
Learn from this, internet. (I know none of you will, but doesn’t hurt to call a bit of attention to it)
whalesalad 6 hours ago [-]
Glad to see a .rpm, Claude only publishes a .deb.
catigula 3 hours ago [-]
Everybody is irritated about electron, but that's not at all the problem. It's possible to write performant and optimized react code. They simply don't. I find the chatgpt app on Windows to be extremely laggy.
quotemstr 3 hours ago [-]
Electron is just another god damn GUI toolkit! What's the fundamental difference between it and, say, GTK4? It's just fucking widgets!
My real problem with Electron is the multi-process render architecture, which I think is pointless for the "just a GUI toolkit" case of rendering only trusted content. I'm 100% fine with Slack, Spotify, whatever using Electron as their choice of GUI toolkits. These come and go. I'm miffed that they use multiple processes when there's no real security boundary between them just because there is a security boundary in the homologous scenario on the web.
Havoc 10 hours ago [-]
Much prefer CLI because its easier to isolate
u8 5 hours ago [-]
I don't think its asking too much of a $1T company to not make a shitty desktop app. Especially when that companies whole moat with developers is that their tools can do our jobs better and faster.
The real reason they're using Electron is that some PM is comfortable with it and since nobody is reading the code, they use that comfort as a crutch to release most-likely working desktop app.
When the creator of a project has infinite money, infinite labor, and infinite incentive to lock more devs into their platform via skill atrophy and the product is still shit, that's the human in the loop.
ksimukka 11 hours ago [-]
oh Electron, leave my ram alone.
arthurfirst 7 hours ago [-]
If you are using linux and cannot use a console to code...
hn0tdqaek4 6 hours ago [-]
Not perfect but a good starting point
badcafe23423435 11 hours ago [-]
Why not create a separate account on Linux just for the agent?
This security measure should also be enabled by default. Many packages REQUIRE the creation of an account, but agents do not. Interesting.
TZubiri 7 hours ago [-]
You can definitely do that, but it is your duty and it cannot be delegated.
Also these things are supposed to help you, their idea is that you give it access and it's helpful proportional to the access you give it. A separate user works for some, especially when vibecoding, you whitelist accesses. But for general computer usage, an assistant that has access to your files and acts as a sort of OS needs your user access.
johnnyApplePRNG 4 hours ago [-]
Meh...
Codex messing around with the usage limits so much these past few months have convinced me to exit my $200/month burden and pick up Pi Coding Agent and Deepseek V4 Flash 0731.
It's incredible what you can do with subagents that you design yourself.
Liberating, really.
varjag 10 hours ago [-]
Is there anything it can do that Codex CLI can't?
indy 8 hours ago [-]
it can consume more of your RAM
tiberriver256 8 hours ago [-]
This is how I get ChatGPT on Windows to not absolutely suck.
Can just install it in WSL now and it's got buttery smooth performance vs. the Windows version
I blame AV hooks
fassssst 6 hours ago [-]
On Windows you definitely want to exclude your code directories from AV and use a dev drive
9 hours ago [-]
linzhangrun 10 hours ago [-]
I tried it yesterday. The experience seems smoother than on Windows. I hope Computer Use will be added soon.
Also, when will OpenAI fix the issue where Xhigh and Ultra are both translated as “极高” in Chinese? It’s been this way for quite some time. As far as I know, the proportion of Chinese employees at these Silicon Valley AI companies is quite high.
SweetSoftPillow 10 hours ago [-]
You have "send feedback" button in the app. Something tells me that it's much better place to report issues with the app rather than comment section on unrelated website.
schafberg 10 hours ago [-]
I think their backend data probably shows that very few Chinese users are using Codex through the official way, and the number of those who have switched to the Chinese interface is even smaller, so there’s not much incentive to fix this issue.
linzhangrun 10 hours ago [-]
I don’t think GPT-5.6 would make such a basic mistake when reviewing CodeX itself.
djyde 9 hours ago [-]
Because all Chinese users must use a VPN to access Codex.
szundi 10 hours ago [-]
[dead]
wltr 13 hours ago [-]
If that’s an Electron app, what’s the difference with running it in the browser?
lwansbrough 13 hours ago [-]
Access to your computer
JPLeRouzic 12 hours ago [-]
That's why I won't download that tool.
tristanj 12 hours ago [-]
Access to your computer is the entire point of the app. Codex computer use can script and control any application on your computer.
You can give it any task on your computer and it can automate it.
Such as creating a photo on Photoshop, creating 3D models, editing videos, or browsing any website without scripting.
Gareth321 12 hours ago [-]
Honestly, you're missing out. The productivity gains I've had with these tools is unbelievable. I understand the risk though, so if you've got government sensitive data on your computer, or no backups, don't use the "full access" option. Babysit what it does instead.
dmortin 12 hours ago [-]
Isn't it expensive, though? If you let it perform gui or web tasks for you using vision, I'd think it consumes lots of tokens.
Closi 11 hours ago [-]
Depends how much you are using it - for a casual user the $20 tier gives you just about enough use for hobby projects etc.
Or if you are doing full time development then you just need to pony up for the 20x tier if you want to use it.
Running Codex locally removes so much friction and is so fast compared to either running it on the web (where it has to build environments online etc which consumes time) or compared to copy-pasting chatgpt that it's just a no-brainer.
zorked 11 hours ago [-]
I don't know about Chatgpt but I used Kimi (they have a Chinese-only plugin that does desktop control - works fine if you enable it even if you don't know Chinese). Observing how it works, it's mostly using the accessibility features of the user interfaces - it fetches a sort of DOM for the desktop applications. Only rarely it has to take a screenshot.
margorczynski 12 hours ago [-]
Can you give some examples? I'm evaluating where/how I could use stuff like this.
vineyardmike 11 hours ago [-]
Literally everything from generic coding agent to shopping.
I run it in a MacOS vm, fwiw, for certain tasks. I usually hand it a repo and say “install all build dependencies” and it’ll click through installation GUIs where necessary. I wonder if the TOS of an application is enforceable if a bot agreed and a human never saw it.
It can UI test web apps if that’s part of your job, but it can also just use the browser for tasks. I’ve had it research flights by checking different dates automatically and compiling the results for me. I’ve heard others use it to handle building a shopping cart for instacart/grocery delivery.
Probably the hero usecase for most people would be app/web development. It can control either a browser or a device simulator and can iteratively build and test the application, by clicking real buttons.
shevy-java 11 hours ago [-]
> Literally everything from generic coding agent to shopping.
People need help with shopping now?
vineyardmike 27 minutes ago [-]
I can probably live most of my life without the transistor being invented, but it’s certainly better with new technology.
“Needs help” is an unnecessary and negative framing, don’t be a hater. We can basically always do what AI does (if not computers at large!), but either it’ll take longer or be boring.
With AI you can automate checking way more price comparisons than manually, with way less effort. With AI you can automate routine shopping tasks like converting a shopping list into an online shopping cart. I can search for specific products across dozens of sites manually, or I can ask AI to find it for me.
ccozan 11 hours ago [-]
ooh, chatGPT is really good in filtering bullshit and recommending the products that really fit.
For serious stuff, is part of the shopping flow.
WASDx 11 hours ago [-]
I upgraded my workflow a few months ago from "copy-paste things in and out of ChatGPT" to "use an agent that edits my project files and runs tests on its own" and the ergonomics are just so much better and enables automating bigger tasks. I still monitor everything it does and do manual adjustments so I feel ownership of the code.
margorczynski 11 hours ago [-]
But isn't that use-case solved a harness like OpenCode or Codex? OpenClaw and Hermes are a bit different beast although they can also be used for development in a more holistic manner (e.g. automated GUI testing).
I'm just wondering about other uses where such a system would be useful aside from asking it via Signal or WA for the weather.
WASDx 10 hours ago [-]
Right. I'm also curious about those use cases. I don't want an AI clicking through my mailbox.
fsflover 10 hours ago [-]
What about running it in a virtual machine?
SillyUsername 13 hours ago [-]
None that I can see - I already have it installed as a chrome app on my Mint desktop, and it seems identical.
martin- 12 hours ago [-]
Does the Chrome app have access to your local files, like when you're working on a code project?
fg137 9 hours ago [-]
Or running local commands or talking to an MCP server at a random domain unrestricted by content policy
water-drummer 13 hours ago [-]
Why do you need nodejs if you can run javascript in the browser?
shevy-java 5 hours ago [-]
I can't answer that question, but I think you can do more with node than with default javascript, such as access to local files. This is something I wanted javascript to do for local use and people always said "you may not do this, your computer will be destroyed". So I just use ruby instead and am still annoyed that javascript is so crippled by default at all times.
shevy-java 11 hours ago [-]
Do people really use that? It seems horrible to turn your computer into a spydevice for AI slop spammers.
corpusiq_io 4 hours ago [-]
[flagged]
zhixingheyi2023 6 hours ago [-]
[flagged]
hnmu4c5zar 7 hours ago [-]
[dead]
RinatNabiev 9 hours ago [-]
[dead]
CurbStomper 7 hours ago [-]
[dead]
78787 9 hours ago [-]
[dead]
villgax 13 hours ago [-]
people good w/ linux would not have been holding their breath for companies which keep intelligence for a premium & h0st@ge depending on policy
0xB0D 11 hours ago [-]
Plague of AI slop.
A senior engineer in an Open Source project told me "I haven't looked at code in months"
I'm a Codex user, and when it was still a standalone app it worked really well for me. Since it became part of the new ChatGPT app, the app feels noticeably slower and, at least on my machine, is currently using around 1.27 GB of RAM [1].
The old ChatGPT app, which has now been renamed "ChatGPT Classic", feels much faster and is using around 478 MB under the same conditions.
I have a reasonably powerful PC, so the difference is pretty noticeable. I assume Classic will eventually be discontinued, but so far the transition to the new app on Windows hasn't been particularly good for me.
[1] https://imgur.com/a/nQkneGL
1. Much better multi-agent orchestration. The app supervises many agents, with different project views and built-in git worktrees, so agents can work on isolated copies of the same repo. It's easy to jump between tasks and see changes. I recall OpenAI wrote that CLI was not designed around this style of work.
2. The app combines multiple terminals, file previews, PR-review workflows, SSH connections, an integrated browser, and page annotations. For front-end stuff, Codex can run the app in Codex for mockups/prototypes, then iterate inside the app. IMHO I think this is a much faster, more intuitive flow.
3. For long-running and recurring agent workflows, I think they're much easier to manage in the app. You get automations, review queues, persistent conversation context, future schedules, and auto resume for longer running tasks. E.g. CI failure summaries, issue triage, and release briefs.
You can do some of the above, to some degree, with varying levels of success in the CLI, but I think it's miles ahead in the app.
This is mostly true with Codex and Claude Code Desktop, but gets a bit trickier with 3rd party tools.
I tried out some others and both Paseo and Kepler felt a little bit clunky especially around sub-agents and workflows (even if they let me have both OpenCode and Claude Code with different providers in the same UI). And OpenCode is plain lovely in the terminal but sorta okay in the browser: compare its display of sub-agents to what Claude Code does, for example; their tabbed interface also feels a tad less pleasant than the vertical menu of projects + sessions that most others are settling on, not their old look with icon per project, that was worse. There's definitely ample room for better tooling, then again early IDEs were far worse, so hopefully ADEs will get more polish eventually!
Still, regardless of what you use and across how many providers, it's nice to have everything in a single familiar interface, if you need that.
However, from the screenshots and description, I expect that you would have these advantages:
- History. Currently, if you type into the CLI (TUI) your intention and requests are captured in some transcripts, but not in conversational turns. If you want the history of what you typed into the cli/tui you would have to datamine it from transcripts. By contrast, on the screenshots you can see it is a simple conversation that's saved and easy to return to.
- Multiplatform. As per the announcement "Use Codex across ChatGPT, your editor, and the terminal", meaning that you could open the ChatGPT app on your phone and continue to interact with this. While this might not matter to you if you exclusively code while sitting in front of your computer, still, it helps you be able to stay on top of things if you are on mobile.
- Background tasks and autonomous work. It says you can schedule it to do things in the background (issue triage, alert monitoring). At the moment, it would only do this if you've asked either codex or another agent to build a harness for it that does so. (i.e. you could ask Claude to build a harness that calls Codex on some schedule or interval.)
These all seem pretty good and I look forward to starting to use it once it's been more battle-tested.
[1] notably, on the Anthropic side the Opus 5 regressions - I had to downgrade to Opus 4.8 as I found Opus 5 was unreliable. I currently use Opus 4.8 and Codex Sol 5.6.
Reminder that the macOS app went from "this is fairly well made" to "it downloads multiple gigabytes of random things and doesn't follow any design conventions nor standards"
The Linux app will fail the same tests.
With the recent security related events we already see that it seems to be wide spread practice that many operators avoid the hassle of isolating their agents.
It is just an incredible cultural experience to see how quick stupidity gets accepted as a behavioural default.
Even for developers working on Linux, you'll be surprised how many have never run a docker command in their life.
Or the long process to educate Windows users, and developers as well, to not run as Administrator.
A VM would be even better, but people could presumably run this in one if we manage to convince them of higher sandboxing in general ?
Why would you even use bubblewrap once it's running in a container? I've been running Codex in a container since it was publicly available, not even sure what you'd use bubblewrap for when you already separated codex from the rest of your filesystem?
I think neither the bundled bubblewrap nor the Ubuntu 24.04 bubblewrap works properly under Docker with the default options ... Yes, I've just tested that by asking Codex to "Test that bubblewrap is working properly" and then "Test again" after apt-get install bubblewrap.
EDIT: So the solution is to run "codex --dangerously-bypass-approvals-and-sandbox" in a Docker container?
If you need the sandboxing capabilities provided by the application and don’t want to run it on the host, you should set up a VM, not a container.
From a systems perspective, it’s foolish to rely on a proprietary application to provide its own isolation guarantees. This is an OS-layer responsibility.
ML/AI experts suffer badly from hubris. They are brilliant in one domain. It transfers poorly to systems engineering. The proof is in the FelonyBench results.
I previously really enjoyed the Codex app. It was easy for me to understand and find what I needed. The conversation view provided the right amount of information without feeling too concise or full of jargon and the typographic hierarchy made it easy to skim. The project based workflow made sense for my needs.
Ever since they combined all ChatGPT into one app though it has become a mess. It's trying to do too much in one. The settings menu is especially bloated, and I find the UI to be too complicated for the simple questions I'm asking outside of development work. I would rather just use the web interface for general use at this point. They've also been updating much of the UI to follow the same patterns as Claude, and I've not been impressed with the Claude desktop app.
To me, they are taking multiple steps backwards. I hope they eventually find their way again.
- Electron based app: Electron is a framework sold on the basis of enabling rapid cross-platform development at the cost of performance.
- Frontier AI company: AI is sold on the basis of enabling rapid development
- App was released in February & took 6 entire months to port to Linux
Though as someone who shipped commercial software on Linux, it wasn't that bad, you just had to ship everything other than the kernel.
Well, with RAM being so cheap, why bother trying to trying to be memory efficient? It's not like OpenAI has an infinite pool of "AI" software engineers to work on this...
Oh wait...
- Apple: SwiftUI/AppKit
- Android: Jetpack
- Windows + Linux: Avalonia (C#)
Avalonia seems good so far. I couldn't do Qt because I can't deal with that qBittorrent look. GTK is aesthetically pleasing for me, but it only runs on Linux. Avalonia lets me target both of these UI-toolkit-less platforms with something native-ish. Flutter is probably good too, but I am using uniffi-rs and that doesn't generate Dart bindings AFAIK.
Would love to hear other options.
[1] https://rubymamistvalove.com/block-editor
Download Edge for Linux and use the PWA. It's still crap but at least it kind of works mostly.
Don't they have agent swarms with infinite tokens?
That was after I asked it to only touch 3 text files in its working directory, after which it sparked macOS permission prompts to access my Desktop, Documents, Downloads, and other apps' data. Thank god for the web platform and web apps.
They can be amazing. But you can write shitty code in them like anywhere else.
AIUI the reason is, "we", collectively even though we don't all work on them, optimize browsers for speed above almost all else. Then, when all the advertising websites on the internet consume all that speed, we can't go back and have to optimized for speed even harder. All that optimizing for speed ends up consuming lots of RAM, from all the images, the speed-optimize DOM with lots of cross-linking, the JIT and its generation of native code paths, the endless layers of caches, etc. etc. at every point where a browser can choose between RAM and speed it will choose speed unless it's just impossible to choose it for some reason.
So even if you write good code in Electron, it still tends to eat resources like candy.
On the plus side, if you write good code, you will pick up all those optimizations too, which is not necessarily all bad. Running something like VSCode at all is a powerful testament to the browser ecosystem now. IDEs do a lot of very heavy duty lifting and need a lot of performance to do all their work. But you can imagine that when the same text rendering system that enables all that fancy & fast syntax highlighting and all the other decorations and features in the editor window is used to display a preview of a markdown file that said preview is probably going to eat way more RAM than your instincts may have guessed.
Not even a $1T dollar company wants to maintain a native Swift Mac app even though they have AI models to build native apps for every platform.
Maybe they thought Electron would save them tokens to build the feature once and it works everywhere rather than spending more tokens on building the same feature on 3 platforms.
What better way to showcase their tools capabilities than to deliver apps that are native, efficient, and integrate well with the host system? By compromising with Electron and making mediocre, bloated software they are signaling that they just aren't there yet.
It would be like Ford buying Hondas for their company cars. It might save them money but it sends the wrong message.
It definitely is a fraction of the work these days to maintain three different desktop apps + two different mobile apps + a web app. But it's still a lot more work than an Electron app that is merely tweaked between platforms.
But I wouldn't know first-hand.
1. generally done well by many different UI frameworks
2. generally done better by most popular native UI frameworks than what Electron provides
BUT - those UI frameworks are typically not (very) cross-platform. In that context, Electron provides one of the best unified text-rendering stories of cross-platform options. But definitely far from the best overall.
Product releases at large companies are slowed dow by coordination and resources more than actual development. (I'm an Electron maintainer who is currently working on better Linux support in the framework, and also a developer/PM for a commercial app that supports Linux.)
It's very likely that the Codex Electron app already "worked" on Linux back in February, as in someone internally could build and run it from source and start a chat session. That fact would have made it possible for a small team to make a business case and start getting support from ops, QA, CS, marketing, legal, etc. The engineers would spend their unlimited tokens on Linux-specific build, packaging, and platform integrations (remember this is a computer use agent) to take the app from a prototype to something a company could actually launch and support for millions of users.
Apps are also a moving target. The entire time building up to release, the Linux desktop app would have been getting feature and design updates for free from the updates going out on Mac/Windows/web. None of those other teams working on those features have have had the time (or the mandate) to coordinate with Linux engineers if they were building a separate app from scratch, and I suspect such a proposal would never have gotten off the ground.
I think you've summarised it really well, & it shows:
- the revolutionary promises of AI-driven rapid delivery is nonsense when the delivery bottleneck was always elsewhere - AI is speeding up the part that was never slow
- the fact that - as you point out - it was likely working in Feb but needed a business case gives a good impression of the leadership's approach to Linux support: it's likely such internal case-making will continue to be a factor in future Linux build maintained
It is a marketing expense. We are talking about it. Surely the token cost was worthwhile on that basis alone. Students will likely get some usage out of it, too. But paying a human to do this port would have been an insane thing to do two years ago. I’d be surprised if they have more than 1000 MAUs for this client by the end of the year.
https://community.openai.com/t/codex-in-chatgpt-desktop-app-...
"The desktop app is designed as a workspace for managing projects, working with files, using browser workflows, and running Codex alongside ChatGPT."
Not sure if I really understand this. And somehow I am worried about ChatGPT having access to my files and workflows. How much control do I have?
Linux users are kind of averse to trojans. You should call it Back Orifice For Linux. You don't even have to change the OpenAI logo!
These apps stands as last defense between users and legitimate owners of compute resources that is electron and pals.
Surely they can just vibe is down to a reasonable footprint, right? Right?
Give it a full desktop in a VM if you want to, just not direct access to your system.
It created 2 new users and then assigned new NTFS permissions for every single file under my user directory to them. This of course wrecked havoc, ssh refused to work, several applications refusing to start and a ton of permission errors. It did this without even a warning in the background and it also does not undo any of it when you uninstall it.
It took around 3 hours to fix it by updating ~10 million NTFS permissions for every single file under my user directory.
I’ve been using Codex in full access mode constantly for the past couple months on a Pro plan and I haven’t had a single incident like this. I’ve used it across macOS, Linux, and Windows as well, so my usage isn’t limited to a specific setup either.
That is not how it works: the "but it works for me" is a logical fallacy.
Haven't you followed a bit all the posts about models, for example, escaping their environments?
The "but it works for me" is a random data point: an anecdote.
That there are people / companies where models ran wild and destroyed files / messed up projects is a fact.
When there are documented cases of stuff gone wrong, people must find ways to protect their data.
We literally see posts frontpage, daily, about AI sandboxing and we regularly see posts about AI escapes or AI SNAFUs.
And you come and post "show me your prompt, for it works on my machine"...
https://medium.com/conquering-corporate-america/10-tricks-to...
For instance recently, media downloads on my NAS became quite a bit slower. I asked it to investigate and it quickly got back to me saying the issue was the ethernet link had been downgraded to 100Mbps from 1Gbps. It even went through journalctl to tell me when this had happened. To fix it I just had to plug an ethernet cable out and back in. Now this is the kind of thing, earlier I would have to spend an evening on. But given an open system like Linux, a well made safe model just makes it so much more accessible than having to RTFM for one off things I am sure to forget in a month.
I dont really let it run loose through my systems, and keep an eye on the thinking traces it puts out and the permissions it asks for. But now I dont have to slog through manuals and deal with gruff people on the internet. I can choose to do so after the fact, depending on how much free time and curiosity I have.
It’s a prison of your own making.
I’ve personally adopted a process where I structure my projects to ALWAYS keep credentials and sensitive information in a separate directory.
The working copy gets rsynced to and from a dedicated VM with whatever $HARNESS.
And for your hypothetical client.
Especially as judging by your description they despite this allow any VSCode plugin to be installed alongside it.
> and I am not making my life miserable to work with editors lacking the specific tools
And that’s the self-imposed prison I was talking about, there’s always alternative tools. In my mind a specific tool is something like Ghidra.
Sectors involved in, in no particular order: government, financial, telecom, energy (gas and electric), manufacturing (large european conglomerates), healthcare, logistics
In fact I was the one usually helping IT Teams put the torture devices and policies you’re subjected to in place lol.
Banks would usually give us laptops with smart card readers and only allowed access to their VPN from a limited set of public IP addresses.
Govt was a bit more lax, but same principles applied, was really fun doing any kind of work over a laggy VNC.
My favourite one was probably where you’d have to hop from one Azure cloud VM, to Citrix to a bastion windows box, off of which you’d RDP to the actual work VM only to putty to the actual damn Linux box you cared about.
Energy sector was more lax, they let us set up a GitLab instance and a small CICD setup to which we’d push the code developed on our local boxes.
Oh and the ones I mentioned - they usually ask us what tools we wanted on our boxes as well.
I would rather live in a shopping cart tent under a bridge.
Weak argument. People don't have infinite time. People just want tools they trust and that aren't enshitified.
In fact, VSCode’s support for Lean is via LSP anyways.
Manual tool calls. I ask AI to give me all the necessary reconnaissance commands, then I run them myself on the host and paste the output on the terminal with the SSH connection into the guest virtual machine where the harness is running. The AI then either figures it out and gives me the answer or runs additional tool calls by me. Repeat until annoying task is done, interrupt if anything suspicious shows up at any point.
If you can’t make that judgement call because of lack of knowledge/familiarity it’s okay - spawn a new fresh chat, get up to speed on the topic first and then resume.
That way you accomplish three things: you learn something new, you fix your problem and you don’t let a Trojan do whatever the hell it wants to your box which among other thing contains all the browser sessions and cookies :)
Also note, that RAG and even vector search are more paths of the early days that didn't prove too valuable. Just let your agent search it directly and optionally create an index as a default entrypoint for common topics.
I guess OpenBSD is the only OS where I never had any problem with Bluetooth audio.
So, yes, I would say agents are pretty good at working with Bluetooth on Linux
- I inspect the agent's changes, and only apply them - at once - if they are OK. So I have no half applied bad changes to my system, and I can catch critical mistakes before they are applied.
- I can roll back the changes by just doing a `git revert` and reapplying
- The agent cannot read secrets or unrelated data, just config.
- The agent gets the full configuration of all systems at once, without having to maintain parallel documentation (which can get out of sync) or rediscover each time from scratch (access my running systems, for example with `ssh root@server`).
- It's harder for the agent to miss some aspect of the configuration, because it's all in my dotfiles. If it's not there, it's nowhere
Also in the news: https://www.whitehouse.gov/presidential-actions/2026/08/expa...
Since we now have three "Codex"es, I think it's worth specifying you're talking about codex-cli/tui. Codex the hosted version and Codex the GUI are both fully proprietary I think (besides the codex-cli/tui parts they use, I'm guessing mainly the app-server stuff).
Or we are just assuming that was a PR stunt, which it almost certainly was.
Either way, this shit isn’t getting near my system.
No.
> Or we are just assuming that was a PR stunt, which it almost certainly was.
It wasn't.
> Either way, this shit isn’t getting near my system.
Sounds about right.
> It wasn't.
Prove it. But you can’t, which is problematic for you.
Nobody should believe anything OpenAI says about anything. They either lied about it breaking out of a sand box, or they’re incompetent by building a sandbox their AI could break out of.
It’s a cute story, though.
I think this cynicism is more then warranted. If anything HN is not cynical enough to meet the times we are in.
Experts related to real programming topics are gone or silent. AI experts have never even been here in the first place. It is all about Electron apps, prompts, agents and other bullshit.
HR is charmed by them despite their lack of discipline.
How magnanimous: they make the effort to support the OS their entire company is based on? It's not just for training the model and hosting them: it's also to run them, where they constantly use Linux to do their thing.
Without Linux, there's no OpenAI.
So I take it the Linux community should be so grateful that OpenAI supports Linux, right?
They use Linux because it's there. If Linux wasn't there, they'd use what's there. There is nothing about Linux that makes it unique enough to be make or break OpenAI. Not one thing.
And yes, when a company distributes their app for the Linux desktop, we should be grateful or at the very least not hostile.
The attitude of Linux zealots is honestly tiresome and it makes us all look bad.
And we should be "grateful"?
The corporate fascism here becomes scary. People here would work for IG Farben and discuss how to disrupt Zyklon-B and make it more efficient.
One of the issues with this new trend of vibecoding a million features, is that the (vibecoded) docs are labrynths of new features, and features that are deprecated or redundant with 2 month younger features.
But I can’t tell from these docs if the ChatGPT desktop app needs to remain running on your macOS/Windows host as a proxy, or if you can directly SSH from your phone to your Linux box with just Codex CLI.
When I tried it a couple of months ago, the CLI version didn't have that feature, it's only present on the desktop app. The docs you linked seem to confirm this:
>In the ChatGPT mobile app, open Remote to work with ChatGPT or Codex chats on a connected Mac or Windows device.
>Start in the ChatGPT desktop app on the host you want to connect.
>Open the ChatGPT desktop app on the host. Go to Settings > Connections > Control this Mac or PC,
Then there's the SSH thing
>Use an SSH host or managed remote development environment when the project already lives in a remote environment. Connect the desktop app host to that environment first;
>For SSH setup details, see connect to an SSH host.
At this point I feel that I need to combine it with other experimental vibecoded features? And the end result would be something that I can hack together with some ddns reverse polling thing. I know I can download an ssh terminal to my phone and connect to my computer by either opening a port, or doing some wacky network stuff. I don't see the value add in doing that by adding the commands I would have to run to some openai config file yaml like
> ssh-tunnel: tailscale > port: 8411
instead of making a bash script with
> tailscale -p 8411
tl;dr: The feature is desktop app dependent, and the desktop app is now on linux, rejoice
- nicer diff rendering, and directly mentioning parts of a diff
- Latex rendering (pretty annoying in the CLI, you have to actively tell Codex it's running in a terminal and replace Latex syntax with UTF-8 glyphs)
All the stuff people are hacking into TUIs is honestly a bit silly, they're actually very inefficient for high fidelity UIs. Having worked in it and on it before while @ GOOG, the actual renderer in Chromium is an optimized thing of beauty. It really makes sense to leverage it. Appropriately.
But all of the above could (should) be done as a locally hosted web page via the existing codex CLI launching a local web server... rather than shipping an electron binary with its own entire fork of Chromium.
And I experimented with gpui from zed, that was even harder to work with.
Of course they could chase performance, but ultimately time to market is the #1 factor right now, and coding agents still aren't good enough to just immediately realize an entire GPUI app from scratch with nothing more than a figma design. Still requires a ton of oversight.
Why do you care? If I chose platform X over Z, that is potentially because I like the visual particularities of this platform.
Seems pretty solid for Mac, but idk about Windows and Linux.
https://openai.com/index/building-chatgpt-atlas/
When I tried that with the Codex CLI version on a Linux VM, I did not get it to work. Possibly because OpenAI only supports connecting ChatGPT to a desktop installation of Codex?
If you really only use ChatGPT on IOS and a VM and nothing else, then I would be curious how you set that up. I do not see a "connect to codex via ssh" in my ChatGPT app. I only see "Connect to a desktop".
Oh HOLY MOLY! Now I see there is not only a "Remote" section in the app but also a "Connection" section where you can add an ssh connection. I need to try that.
Thanks!
Also for future readers: Yes, I'm sure there's no desktop app in the middle. I have dedicated remote VMs that run agents. I don't have them running on the desktop, not even as a middle man.
Meanwhile I am looking at a Crush client running beside neovim in a herdr session I am accessing via ssh to a machine in my garage with 4 local GPUs. I think we Linux users have got this without Sams help.
This is fantastic as I can toast or reheat my frozen waffles on the same machine which is also running a agentic loop on codex desktop to cook my software.
Even with Linux, there are more people -- including many non software engineers -- that are installing Linux on their home computers and may be interested in this.
Bear in mind that HN users don't remotely resemble the general population, or even employees at a tech company -- there are lots of people in finance, business, legal etc who could potentially benefit from this.
There's probably more I don't remember too. In my opinion TUI apps are just silly. You don't get any of the advantages of it being just plain text because it's all wrapped in funny Unicode characters and at the same time the GUI capabilities are hamstrung by being text on a grid.
It can be controlled from your phone once paired, and it lets you actually see agents that it orchestrates in the threads. Also if you use MCP Apps, it can integrate those into threads.
Tabs for long-running often-compacted sessions is a difference I've noticed in emergent UX.
The best feeling has to be in the CLI, in my oppinion. A low-stakes project where you can let ultracode runaway from you in the CLI is the most fun.
Also OpenAI: Aight look, Electron is the best that we can do at this point, take it or leave it.
If this isn’t enough to convince you how little truth there is in everything these companies claim, then you have been brainwashed entirely already.
Why aren’t we getting quality native apps on all platforms, released simultaneously, if these AI code monkeys are THAT good? Where are all these amazing experiences built with AI that these guys keep promising?
I guess an Electron monstrosity is about as far as it can go.
Learn from this, internet. (I know none of you will, but doesn’t hurt to call a bit of attention to it)
My real problem with Electron is the multi-process render architecture, which I think is pointless for the "just a GUI toolkit" case of rendering only trusted content. I'm 100% fine with Slack, Spotify, whatever using Electron as their choice of GUI toolkits. These come and go. I'm miffed that they use multiple processes when there's no real security boundary between them just because there is a security boundary in the homologous scenario on the web.
The real reason they're using Electron is that some PM is comfortable with it and since nobody is reading the code, they use that comfort as a crutch to release most-likely working desktop app.
When the creator of a project has infinite money, infinite labor, and infinite incentive to lock more devs into their platform via skill atrophy and the product is still shit, that's the human in the loop.
Also these things are supposed to help you, their idea is that you give it access and it's helpful proportional to the access you give it. A separate user works for some, especially when vibecoding, you whitelist accesses. But for general computer usage, an assistant that has access to your files and acts as a sort of OS needs your user access.
Codex messing around with the usage limits so much these past few months have convinced me to exit my $200/month burden and pick up Pi Coding Agent and Deepseek V4 Flash 0731.
It's incredible what you can do with subagents that you design yourself.
Liberating, really.
Can just install it in WSL now and it's got buttery smooth performance vs. the Windows version
I blame AV hooks
You can give it any task on your computer and it can automate it. Such as creating a photo on Photoshop, creating 3D models, editing videos, or browsing any website without scripting.
Or if you are doing full time development then you just need to pony up for the 20x tier if you want to use it.
Running Codex locally removes so much friction and is so fast compared to either running it on the web (where it has to build environments online etc which consumes time) or compared to copy-pasting chatgpt that it's just a no-brainer.
I run it in a MacOS vm, fwiw, for certain tasks. I usually hand it a repo and say “install all build dependencies” and it’ll click through installation GUIs where necessary. I wonder if the TOS of an application is enforceable if a bot agreed and a human never saw it.
It can UI test web apps if that’s part of your job, but it can also just use the browser for tasks. I’ve had it research flights by checking different dates automatically and compiling the results for me. I’ve heard others use it to handle building a shopping cart for instacart/grocery delivery.
Probably the hero usecase for most people would be app/web development. It can control either a browser or a device simulator and can iteratively build and test the application, by clicking real buttons.
People need help with shopping now?
“Needs help” is an unnecessary and negative framing, don’t be a hater. We can basically always do what AI does (if not computers at large!), but either it’ll take longer or be boring.
With AI you can automate checking way more price comparisons than manually, with way less effort. With AI you can automate routine shopping tasks like converting a shopping list into an online shopping cart. I can search for specific products across dozens of sites manually, or I can ask AI to find it for me.
For serious stuff, is part of the shopping flow.
I'm just wondering about other uses where such a system would be useful aside from asking it via Signal or WA for the weather.
A senior engineer in an Open Source project told me "I haven't looked at code in months"
In which case what TF is it you even do ?