4 ms·
As a "red teamer" ;-), I approve this message. Vibe coded apps? The more the merrier, guys.
by Fokamul 1y ago
As a "red teamer" ;-), I approve this message.
Vibe coded apps? The more the merrier, guys.
- Retr0id 1y agoDon't get too excited, there are vibe-security-audit platforms now too.
- andrewSC 1y agoI just got a little more excited ;)
- wslh 1y agoNot only audit, but offensive security tools such as XBOW [1], backed by Sequoia and that finds and exploits vulnerabilities. I am on the waitlist though. [1] https://xbow.com/ https://xbow.com/
- Sytten 1y agoDon't get your hopes up, I am in this market and most of it is not good. It is even doubtful that it is a step up from a regular scanner.
- wslh 1y agoWhen I'm in skeptic mode like you, I still see all these projects as valuable contributions to general research in the field, even if they fail. My skepticism is mainly about the idea of an "all-knowing LLM" but I'm less skeptical about the value LLMs can provide when it comes to digesting large amounts of data and decision making. I was very impressed by the following news [1] but the people team is top notch. [1] https://team-atlanta.github.io/blog/post-atl/ https://team-atlanta.github.io/blog/post-atl/
- cddotdotslash 1y agoThis "AI will never replace _my_ job" attitude by security folks (and I say this as a security engineer myself) is insufferable. Yeah, there are likely lots of vulnerabilities getting vibe coded into apps right now. But AI is improving rapidly, and in a few years you'll likely look back wondering what happened to the job market. Adapt or don't, I suppose.