AI-generated code could be a disaster for the software supply chain. Here’s why.

Status
You're currently viewing only San Diego Dude's posts. Click here to go back to viewing the entire thread.
I code with AI daily. The secret of AI coding is to know WTF you're doing going in so you can understand what the AI is suggesting, also to do targeted updates. Feeding a 3k line script into an AI and telling it to 'improve this for me', even on the latest foundation super coders, is a recipe for disaster. Vibe coding is fun for weekend projects, but doesn't belong anywhere near production code, at least not without somebody who knows how it works.

Also, CVE scanner exist for a reason. I'm no more convinced a human coder will be as up to date with zero day exploits as an LLM coding assistant. Don't rely on your own programming knowledge OR an AI to avoid exploits. Use a scanner FFS.
 
Upvote
2 (3 / -1)
Status
You're currently viewing only San Diego Dude's posts. Click here to go back to viewing the entire thread.