2 ms·

Do you care about the messenger or the message? I use AI to communicate because I have dyslexia and ADHD. It helps me articulate technical concepts clearly. Th

Do you care about the messenger or the message? I use AI to communicate because I have dyslexia and ADHD. It helps me articulate technical concepts clearly. The irony isn't lost on me - I built a tool to audit AI-generated code, using AI, because I can't code, and now I'm using AI to explain it. If that offends you more than 204 SQL injections in production code, we have different priorities.

sippeangelo 1y ago
This is the stuff of nightmares. You have vibe-coded 50k lines of Python over 250 hours, but you can't articulate what it does or how it does it without having the same AI read the code back and describe it to you? Like your LLM said, it IS turtles all the way down! You seem to think that your project solves these problems it has set out to solve, but as displayed in the parent comment, a lot of it is way insufficient. Are you blindly trusting the LLM Yes Man?
- ThailandJohn 1y ago
  Yes, i cant code but i can build systems, more news at eleven... That's why I built this. The 204 SQL injections it found in production? Those were real. Those are produced by industry standard tools.... The nightmare isn't that I used AI to build a security tool. The nightmare is that your production code was probably written the same way. At least I'm checking mine.
slacktivism123 1y ago
What offends me is a "security scanner" for "ground truth" using fake checksums to verify integrity of its dependencies ;-) https://github.com/TheAuditorTool/Auditor/commit/f77173a55173b1da1984c7fc9f6dcff537595498 https://github.com/TheAuditorTool/Auditor/commit/f77173a5517...
- ThailandJohn 1y ago
  Yeh, i dont dont use nix so when asked to follow the link? It didnt work as it should. And because i dont use nix? Hard to catch it until my friend did... That said? Did you the hash fail? Yes it did, security working as intended... Anything more to add? :)

sippeangelo 1y ago

This is the stuff of nightmares. You have vibe-coded 50k lines of Python over 250 hours, but you can't articulate what it does or how it does it without having the same AI read the code back and describe it to you? Like your LLM said, it IS turtles all the way down! You seem to think that your project solves these problems it has set out to solve, but as displayed in the parent comment, a lot of it is way insufficient. Are you blindly trusting the LLM Yes Man?

ThailandJohn 1y ago
Yes, i cant code but i can build systems, more news at eleven... That's why I built this. The 204 SQL injections it found in production? Those were real. Those are produced by industry standard tools.... The nightmare isn't that I used AI to build a security tool. The nightmare is that your production code was probably written the same way. At least I'm checking mine.

slacktivism123 1y ago

What offends me is a "security scanner" for "ground truth" using fake checksums to verify integrity of its dependencies ;-) https://github.com/TheAuditorTool/Auditor/commit/f77173a55173b1da1984c7fc9f6dcff537595498 https://github.com/TheAuditorTool/Auditor/commit/f77173a5517...

ThailandJohn 1y ago
Yeh, i dont dont use nix so when asked to follow the link? It didnt work as it should. And because i dont use nix? Hard to catch it until my friend did... That said? Did you the hash fail? Yes it did, security working as intended... Anything more to add? :)