3 ms·
I have. And I have already identified that it can generate, unwittingly, code or string values that break things or cause code injection if you don't treat its
by sebastiennight 3y ago
I have. And I have already identified that it can generate, unwittingly, code or string values that break things or cause code injection if you don't treat its outputs as "untrustworthy" and just run them as SQL/insert to DB/display to user.
Also, it is very likely that a further GPT model might behave, with non-malicious prompt, like a malicious actor, simply because such an fairly-unlikely event is almost guaranteed at the kinds of scales we are talking (100MM weekly active users is a lot of rolls of the dice).
- skybrian 3y agoYes, it could have security holes and it all needs to be reviewed. At scale, a lot of mistakes could pass code review. But people make mistakes, too. The code that people write themselves or copy from Stack Overflow will have lots of bugs at scale. For the individual programmer who knows what they're doing and uses it responsibly, it's unclear that the risks are any higher than writing code on your own.