AA@cR0w@infosec.exchange AI will save the day. 😅
David@AAKL@infosec.exchange @cR0w@infosec.exchange I wonder whether AI wrote that code. If so, presumably, the LLM was trained on all the stack overflows and other classic security defects in the history of published C code.
AA@deFractal@infosec.exchange @cR0w@infosec.exchange Would it surprise you if I said that occurred to me after @cR0w@infosec.exchange mentioned that it shouldn't have happened?
cR0w@AAKL@infosec.exchange @deFractal@infosec.exchange
Them: We have AI that can write your code so you don't have to!
Us: What's the AI trained on?
Them: Bad examples in Stack Overflow and Reddit questions.
Us: ...
David@cR0w@infosec.exchange @AAKL@infosec.exchange The name of Stack Overflow is seeming to be less of a joke now that every stack overflow on Stack Overflow (and on Reddit and GitHub, etc.) has now been assimilated into the LLMs.
cR0w@deFractal@infosec.exchange @AAKL@infosec.exchange The self-fulfilling prophecy of a site name.
AA@cR0w@infosec.exchange @deFractal@infosec.exchange Garbage in, garbage out.
David@cR0w@infosec.exchange @AAKL@infosec.exchange Hacker humour has long been characterized as "ha ha only serious," so I suppose it's fitting. If @codinghorror@infosec.exchange founded a LinkedIn competitor, maybe he could call it "path traversal." ;-)