As a pentester this new wave of GPT-led development has been both a nightmare and a dream. A nightmare because we have “devs” using it to develop applications

As a pentester this new wave of GPT-led development has been both a nightmare and a dream. A nightmare because we have “devs” using it to develop applications laden with vulnerabilities. As an example we found a web app with account enumeration/forced browsing vulnerabilities that would have led to a sizable chunk of our user base being exposed. It would later come out that he had copied and pasted everything from ChatGPT. When I asked him if he trusted everything he found on StackOverflow he said no as if I was an idiot. When I asked him why he trusted ChatGPT he said “because I asked it to check the code for any vulnerabilities and it said there were none”. But, like I said, it’s also been a dream. I’ve seen an uptick in sites with poor practices on bug hunting platforms and I’ve banked about 35k. So that’s nice.