2 ms·
What filter? You say you rely on CC to suggest software to install from the internet, and then you install it. I haven't heard anyone suggest CC or any LLM as
by moritzwarhier 6mo ago
What filter?
You say you rely on CC to suggest software to install from the internet, and then you install it.
I haven't heard anyone suggest CC or any LLM as a "filter" for "is this package safe right now", and it seems like a very bad heuristic to me, not only, but also for the reason you gave.
- nrengan 6mo agoWell, people weren't checking CVEs before pip install before CC either, CC just scaled the habit to a larger audience at a faster cadence. The blast radius for day-zero compromises is what changed.
- ShyCodeGardener 6mo agoHow has the blast radius changed though? The vibecoders that weren't developers before? If someone switched from pip installing themselves to having Claude do it, I don't see how that increased the blast radius.