3 ms·
I doubt SOTA models nowadays are going to produce an implementation without any kind of authentication like here, and not tell you about it. And even if, a lat
by user43928 2mo ago
I doubt SOTA models nowadays are going to produce an implementation without any kind of authentication like here, and not tell you about it.
And even if, a later "is this ready for release" will probably surface such obvious issues.
I do not think LLMs are the problem here. Today, they are most likely more competent than whoever set this up.
- skydhash 2mo agoStill the six month wait time when everything should be good? /s
- user43928 2mo agoNo, what I said is that I think this has already been good for some time.
- wongarsu 2mo agoHowever if you start current SOTA models out on a bad codebase they will happily write more bad code to fit in with the "conventions" of the existing code. Including authentication and isolation. If you start out your app on the wrong foot (for example because you lack the vocabulary to express what you need) you can end up with nicely polished turds Asking the LLM for a review of the code would still have caught it
- sensanaty 2mo agoI love the never-ending "SOTA" treadmill used to defend anything and everything these LLM tools shit up. Doesn't matter what happens, it wasn't one of the "SOTA" models (which changes every 7 seconds) ergo it's irrelevant, how very convenient for the AI pushers!
- Ekaros 2mo agoCan someone give me exact time when SOTA stop being good? Is it a day, week or a month? As such can I consider anything older than that time period to automatically be crap?
- user43928 2mo agoMore than half a year ago, someone may or may not have used AI to implement this insecure backend. That is not a very good basis to start complaining about AI producing insecure code. If you still want to do it, at least check if it actually is the case with reasonably intelligent current models.