3 ms·
>but may be sufficient for a specific task Yes more than sufficient for an internal tool - we can assume good intentions of the users of the tool since people
by afiodorov 3y ago
>but may be sufficient for a specific task
Yes more than sufficient for an internal tool - we can assume good intentions of the users of the tool since people want for this to actually work and have no intention of hacking.
- phanimahesh 3y agoExcept now it's a vector if anyone gets access to this internal tool. I would be fine with this for one off scripts but absolutely can not consider anything less than full sql parsing or something equally robust if it is exposed over the network, even if only internally and behind authn and authz.
- docmars 3y agoFor this reason, I tend to ask LLMs additional questions like: "show me another way to do this" or specifically "how would someone with a higher need for security write this?"... knowing that I'm likely to get a more refined answer from different sources that have probably discussed deeper security implications around the same goals, for instance.