3 ms·
Except now it's a vector if anyone gets access to this internal tool. I would be fine with this for one off scripts but absolutely can not consider anything le
by phanimahesh 3y ago
Except now it's a vector if anyone gets access to this internal tool.
I would be fine with this for one off scripts but absolutely can not consider anything less than full sql parsing or something equally robust if it is exposed over the network, even if only internally and behind authn and authz.
- docmars 3y agoFor this reason, I tend to ask LLMs additional questions like: "show me another way to do this" or specifically "how would someone with a higher need for security write this?"... knowing that I'm likely to get a more refined answer from different sources that have probably discussed deeper security implications around the same goals, for instance.