2 ms·
This example illustrates one of the risks of using LLMs without subject expertise though. I just tested this with claude and got that exact same validation meth
by jonvk 2y ago
This example illustrates one of the risks of using LLMs without subject expertise though. I just tested this with claude and got that exact same validation method back. Using string comparison is dangerous from a security perspective [1], so this is essentially unsafe validation, and there was no warning in the response about this.
1. https://sqreen.github.io/DevelopersSecurityBestPractices/timing-attack/python https://sqreen.github.io/DevelopersSecurityBestPractices/tim...
- jpc0 2y agoAre you talking about the timing based attacks on that website which fails miserably at rendering a useable page on mobile?