‘Vibe coding’ using LLMs susceptible to most common security flaws
https://www.scworld.com/news/vibe-coding-using-llms-susceptible-to-most-common-security-flaws
https://www.scworld.com/news/vibe-coding-using-llms-susceptible-to-most-common-security-flaws
15 Comments
ptz@dubvee.org · 32 pts · 1y
Who would have thought letting an AI shit out slop code would produce insecure, slop code? I'm shocked, I tell you. Shocked.
i_dont_want_to@lemmy.blahaj.zone · 18 pts · 1y
Just keep giving it more prompts and editing the output until the squiggles go away and it runs. It will be just fine, surely.
18USCode2381@infosec.pub · 26 pts · 1y
iAvicenna@lemmy.world · 12 pts · 1y
Valmond@lemmy.world · 10 pts · 1y
Even classic coders doesn't automatically write safe and secure code.
meliante@lemm.ee · -8 pts · 1y
That's the crux of it. People talk like most coders are some kind of know all security and best practices wise.
That's just a lie or virgin innocence.
Most coders are just keyboard monkeys, those are the replaceable ones.
nexas_XIII@lemm.ee · 6 pts · 1y
Ah yes, as they gain experience and learn they’re still just keyboard monkeys. Guess we should go back and try to type up some Shakespeare eh?
meliante@lemm.ee · -13 pts · 1y
LLMs have been improving at a much faster pace than a programmer gaining experience and learning.
Y'all are just burying your head in the sand.
underscore_@sopuli.xyz · 6 pts · 1y
Bogus comparison. Babies also gain skills and knowledge at a much higher rate than adults but they make poor software architects and are prone to being sick on hardware.
meliante@lemm.ee · -3 pts · 1y
What? That doesn't make any sense. You must be a pRoGrAmMeR!1!!11
nexas_XIII@lemm.ee · 2 pts · 1y
Maybe in pure technical experience. But to fully integrate the business logic, legacy logic, and new logic it’s going to take more than just LLMs (at least for now)
meliante@lemm.ee · 2 pts · 1y
That's the part where there's a person doing the vibe coding. If that person is not completely ignorant, helps.
fubarx@lemmy.world · 7 pts · 1y
Vibecoding without git (so you can revert back to a last working version) is like:
Kissaki@programming.dev · 5 pts · 1y
In Vibecoding you can let the AI do the git commits and reverts
hperrin@lemmy.ca · 6 pts · 1y
Vibe coding is just like passing all your coding tasks off to that friend who’s been doing coding as a hobby for the last four months.
Glitch@lemmy.dbzer0.com · 0 pts · 1y
Lol and hammers are terrible at setting screws. I appreciate the heck out of vibe coding a prototype and massaging it into place. It doesn't work well for security, polish, performance, heck most things really. Vibe coding only really replaced stack overflow lol