llmslave2

21 ms·

1. 331.▲
   by llmslave2 10mo ago

   XSS is a RCE exploit. It allows you to run any action as if you were the owner of the account. How is that not a full account takeover?
2. 332.▲
   by llmslave2 10mo ago

   Yeah thats the scary thing. I know it's a bit of a meme about how as programmers we don't trust other programmers or software, but it's becoming more and more true and necessary. I want to use as little software as possible t
3. 333.▲
   by llmslave2 10mo ago

   I'm giving them the benefit of the doubt, as the alternative would be that their developers are completely incompetent. The vulnerability is the equivalent to letting a user save HTML to a database and then injecting it into every page
4. 334.▲
   by llmslave2 10mo ago

   You're right that it's a specific programming culture that is especially vulnerable to it. And for the same reasons they were vulnerable to the same thing to a lesser degree before the rise of LLMs. But like, this case isn't
5. 335.▲
   by llmslave2 10mo ago

   This feels so emblematic of our current era. VC funded vibe coded AI documentation startup somehow gets big name customers who don't properly vet the security of the platform, ship a massive vulnerability that could pwn millions of use
6. 336.▲
   by llmslave2 10mo ago

   This feels so emblematic of our current era. VC funded vibe coded AI documentation startup somehow gets big name customers who don't properly vet the security of the platform, ship a massive vulnerability that could pwn millions of use