4 ms·

Where are you encountering all this slop code? At my work we use LLMs heavily and I don't see this issue. Maybe I'm just lucky that my colleagues all have Uni d

Where are you encountering all this slop code? At my work we use LLMs heavily and I don't see this issue. Maybe I'm just lucky that my colleagues all have Uni degrees in CS and at least a few years experience.

post-it 8mo ago
> Maybe I'm just lucky that my colleagues all have Uni degrees in CS and at least a few years experience. That's why. I was using Claude the other day to greenfield a side project and it wanted to do some important logic on the frontend that would have allowed unauthenticated users to write into my database. It was easy to spot for me, because I've been writing software for years, and it only took a single prompt to fix. But a vibe coder wouldn't have caught it and hackers would've pwned their webapp.
- giancarlostoro 8mo ago
  You can also ask Claude to review all the code for security issues and code smells, you'd be surprised what it finds. We all write insecure code in our first pass through if we're too focused on getting the proof of concept worked out, security isnt always the very 1st thing coded, maybe its the very next thing, maybe it comes 10 changes later.
  - blibble 8mo ago
    > We all write insecure code in our first pass through no, we don't
    - giancarlostoro 8mo ago
      Yes we do, you don't just start a brand new web project and spit out CORS rules, authentication schemes, roles, etc in one sitting do you? Are you an AI?
      - blibble 8mo ago
        > are you an AI? no, I'm a competent engineer maybe you've not worked with any
        giancarlostoro 8mo ago
        So let me get this straight, you get instructed to build an Instagram clone, and you sit down and one shot code every single feature for the project? My point is about in one sitting, doing EVERYTHING all at once, without pausing, without standing up, without breaks. I don't know about you but people who tend to rush code out make just as many if not worse mistakes than AI does. I've worked with many competent engineers and have built things people couldn't even google help for before AI existed, and that surpassed mine and my teams expectations both solo and in a team setting, none of them were done in one sitting, which is what you're suggesting. Everything is planned out, and done piecemeal. For the record, I can one shot an AI model to do all of those things, with all the detail they need and get similar output as if I gave a human all those tasks, I know because I've built the exact tooling to loop AI around the same processes competent developers use, and it still can do all of it in record time.
        habinero 8mo ago
        > I can one shot an AI model to do all of those things Bullshit you can lol. If it's that trivial, create an instagram right now and post the code.
      - girvo 8mo ago
        Yes I really do, because this has been a solved problem for a while. Also it’s necessary to get right because retro fitting it later is a pain.
        giancarlostoro 8mo ago
        So if you're going to build a massive application say, YouTube, Facebook or Instagram you're going to sit down, and write out every template, db model, controller, view model, etc in one single sitting for the entire application? No bathroom breaks, no lunch, no "I'll finish that part tomorrow" you do it ALL in one sitting? Because you will miss something, and that's my point, nobody gets their first crack at a greenfield project 100% in one sitting, you build it up to what it is. The AI is used the same way.
- deleted 8mo ago
  [deleted]
bowsamic 8mo ago
The issue isn't when the programmers start using it. It's when the project managers start using it and think that they're producing something similar to the programmers

post-it 8mo ago

> Maybe I'm just lucky that my colleagues all have Uni degrees in CS and at least a few years experience. That's why. I was using Claude the other day to greenfield a side project and it wanted to do some important logic on the frontend that would have allowed unauthenticated users to write into my database. It was easy to spot for me, because I've been writing software for years, and it only took a single prompt to fix. But a vibe coder wouldn't have caught it and hackers would've pwned their webapp.

giancarlostoro 8mo ago
You can also ask Claude to review all the code for security issues and code smells, you'd be surprised what it finds. We all write insecure code in our first pass through if we're too focused on getting the proof of concept worked out, security isnt always the very 1st thing coded, maybe its the very next thing, maybe it comes 10 changes later.
- blibble 8mo ago
  > We all write insecure code in our first pass through no, we don't
  - giancarlostoro 8mo ago
    Yes we do, you don't just start a brand new web project and spit out CORS rules, authentication schemes, roles, etc in one sitting do you? Are you an AI?
    - blibble 8mo ago
      > are you an AI? no, I'm a competent engineer maybe you've not worked with any
      - giancarlostoro 8mo ago
        So let me get this straight, you get instructed to build an Instagram clone, and you sit down and one shot code every single feature for the project? My point is about in one sitting, doing EVERYTHING all at once, without pausing, without standing up, without breaks. I don't know about you but people who tend to rush code out make just as many if not worse mistakes than AI does. I've worked with many competent engineers and have built things people couldn't even google help for before AI existed, and that surpassed mine and my teams expectations both solo and in a team setting, none of them were done in one sitting, which is what you're suggesting. Everything is planned out, and done piecemeal. For the record, I can one shot an AI model to do all of those things, with all the detail they need and get similar output as if I gave a human all those tasks, I know because I've built the exact tooling to loop AI around the same processes competent developers use, and it still can do all of it in record time.
        habinero 8mo ago
        > I can one shot an AI model to do all of those things Bullshit you can lol. If it's that trivial, create an instagram right now and post the code.
    - girvo 8mo ago
      Yes I really do, because this has been a solved problem for a while. Also it’s necessary to get right because retro fitting it later is a pain.
      - giancarlostoro 8mo ago
        So if you're going to build a massive application say, YouTube, Facebook or Instagram you're going to sit down, and write out every template, db model, controller, view model, etc in one single sitting for the entire application? No bathroom breaks, no lunch, no "I'll finish that part tomorrow" you do it ALL in one sitting? Because you will miss something, and that's my point, nobody gets their first crack at a greenfield project 100% in one sitting, you build it up to what it is. The AI is used the same way.
deleted 8mo ago
[deleted]

bowsamic 8mo ago

The issue isn't when the programmers start using it. It's when the project managers start using it and think that they're producing something similar to the programmers