3 ms·

> I'm not a developer, and I made this with Claude Opus's help PSA: just clicked into this post after reading another submission complaining about how compani

by cj 2y ago

> I'm not a developer, and I made this with Claude Opus's help PSA: just clicked into this post after reading another submission complaining about how companies don't take security seriously enough. If you care about the security of your browser, installing a dozen random chrome extensions like this definitely isn't going to help. Especially when the author is a self-proclaimed "not a developer" and made this by copy and pasting code from a LLM. This new wave of non-developers deploying code to production that makes its way to a Show HN on the homepage here for 7 hours is scary to me. I'm all about making coding more accessible to non-engineers, but security, edge cases, failure states, etc is something LLMs are not particularly good at. And even the non-code part of the original release of the extension had very little thought put into the block list. (E.g. he was blocking sites like the library of Congress, loc.gov, cancer.gov, CDC.gov, etc). Pastebin list of the originally blocked sites, which the author has since went back and cleaned up: https://pastebin.com/VHuHTeqp https://pastebin.com/VHuHTeqp

627467 2y ago
> This new wave of non-developers deploying code to production that makes its way to a Show HN on the homepage here for 7 hours is scary to me. I understand the feeling, and yet different tools/stages of increased digitalization of life are at the root of what is scary, not AI. personal data is input into the "global world computer" at astonishing rate, payments, payment credentials, all this attracting opportunist players with outright intentions of grabbing all this "public" data. even seasoned engineers are vulnerable to supply chain attacks. whether "new" code is developed by or with AI assistants seems the least of the problems in this context.
- Tao3300 2y ago
  Both those things are stupid. Or scary. Whichever you prefer. This isn't dev. This isn't hacking in the classic sense of the word. This is asking a genie to do it, trusting he's not malign or incompetent, and then saying "look, I made this!"

by cj 2y ago

627467 2y ago

> This new wave of non-developers deploying code to production that makes its way to a Show HN on the homepage here for 7 hours is scary to me. I understand the feeling, and yet different tools/stages of increased digitalization of life are at the root of what is scary, not AI. personal data is input into the "global world computer" at astonishing rate, payments, payment credentials, all this attracting opportunist players with outright intentions of grabbing all this "public" data. even seasoned engineers are vulnerable to supply chain attacks. whether "new" code is developed by or with AI assistants seems the least of the problems in this context.

Tao3300 2y ago
Both those things are stupid. Or scary. Whichever you prefer. This isn't dev. This isn't hacking in the classic sense of the word. This is asking a genie to do it, trusting he's not malign or incompetent, and then saying "look, I made this!"