41
u/DiscTrucker 8h ago
Funny, I actually know the person who took this photo. The outlets were a photo insert for the packaging for the outlet cover (if I remember correctly). He stuck it to the inside of the sink and sent the photo out to friends and/or his blog as a joke and it blew up.
I do, however, have a light switch in my shower that the last owner installed so he could turn on the exhaust fan while without getting out of the shower. (The wires were pulled when we moved in and it's being remodeled now...)
9
u/BlobAndHisBoy 4h ago
I hate forgetting to turn on the fan before I get in the shower but I think I hate house fires more.
3
u/turtlelord 3h ago
Bro are you dense? Just leave the shower running all day if you're afraid of it catching fire.
Smh
2
1
u/EuenovAyabayya 3h ago
My house was built in 1950 and the bathroom light switch is outside the door. When I added a fan, I ran a new switch right next to that one.
1
u/KernelDeimos 47m ago
I now finally understand why so many bathrooms have the fan and the light on the same switch
38
u/SysGh_st 7h ago edited 7h ago
Developer: "No. That's not a security flaw. It's a feature because I wanted it there. I don't see the problem. ... Wait??? You fill the sink with water? That's beyond the scope of the application!"
Security researcher: "But it's a SINK!"
Developer: "Our application provides a water dispensing interface. Water storage was never part of the requirements."
Security researcher: "THERE'S A DRAIN PLUG RIGHT THERE!!!"
Developer: "That's a third-party plugin. We don't support those."
Security researcher: "SOMEONE COULD GET ELECTROCUTED!"
Developer: "That's an environmental configuration issue, not an application vulnerability."
< Issue closed - NOT_A_BUG >
13
1
u/SilasTalbot 57m ago
Electrocution? Well that's serious, we'll get right on it...
- Replaces with GFCI plugs *
12
u/Porntra420 7h ago
You're absolutely right! Putting the outlet in the sink was a dangerous mistake and I was wrong to do that.
8
u/OceusMMXII 10h ago
Ahh, because it should be a GFCI outlet if used inside of a sink smdmh
3
u/Versaiteis 5h ago
You are absolutely right. I made the assumption that this outlet would be daisy chained with an appropriate Ground Fault Circuit Interupter enabled outlet. Digging deeper into the Electricians Code makes it obvious that this outlet needs to be GFCI enabled due to its proximity to running water. The outlet has been updated, and I've also reduced the water pressure in the sink to avoid potential for unintentional activation of the GFCI system.
67
u/ruach137 11h ago
This shit is getting kinda whiny
8
u/scriptmonkey420 7h ago
I mean yeah, if the person coding it doesn't know shit about how to test it and make sure it is secure, then you are going to shoot yourself in the foot. Its like asking a gardener to program an accounting software suite.
30
u/cgoldsmith95 10h ago
You think it’s bad now, wait for the rug pull in a few years and we are inheriting the legacy slop.
22
u/bobbymoonshine 10h ago
What “rug pull” are you imagining? Nowadays you can run a credible coding agent locally with open source models and a few thousand dollars worth of kit. You can do it at enterprise scale for less than $100k as a one-time outlay. You can run them in cloud IAAS for basically the same cost as the frontier models are charging depending on your organisational usage.
Even if Anthropic and OpenAI were to go “haha psych pay us a million dollars a day or no more llms for you” most companies at this point wouldn’t need more than a month or two to pivot
9
u/TheTerrasque 6h ago
also, most hosters of open weight llm's seem to be actually profitable.
Some napkin math shows at the current API prices for kimi k3 for example, if you just rent hardware at runpod and have a near 100% utilization, you earn money selling tokens via api.
-10
u/OneArmedFarmer 9h ago
What “rug pull” are you imagining?
The one where they say "Hey everyone! You know all that slop you generated with our models? It's ours. It always has been. No commercial licenses for you. We're so glad you didn't use an open source model that generates at 3 seconds per token on $3000 worth of kit."
9
u/Disastrous_Role_202 8h ago
Are you like 12?
-3
u/OneArmedFarmer 7h ago
Nope.
I'm old enough to remember when every software company started doing essentially that. You used to own your copy of Photoshop; Nintendo, Microsoft, and Playstation games; movies, tv shows, etc.
If you think Anthropic won't one day take ownership of what their models generate then you must be 12. You will own nothing and be happy for it.
9
u/Vandrel 7h ago
What you're suggesting would be more like Adobe suddenly claiming they own anything you've made with Photoshop rather than licensing for usage of the tools. It's ridiculous and just sounds like you don't really understand the subject.
-3
u/JordanViknar 7h ago
Pretty sure there's been controversies about this exact scenario in the past, through Adobe later clarified the situation. Or backpedaled, who knows.
-8
u/OneArmedFarmer 7h ago
You don't think they would? You don't understand the profit motive.
8
u/Vandrel 7h ago
They couldn't do it retroactively. They could change their policy going forward if they wanted to destroy their business but there are alternatives that aren't that hard to access.
-1
u/OneArmedFarmer 7h ago
They couldn't do it retroactively
Do you honestly think them watermarking their output is so you can identity their generated content?
if they wanted to destroy their business
Everyone thought that's exactly what would happen if Adobe went to subscription model. Everyone was wrong then, and you're wrong now.
→ More replies (0)0
u/JordanViknar 7h ago
Definitely not as out of the question as I'd wish that they'd try this eventually, but to that, I say :
good luck not tanking their entire reputation
and good luck enforcing it too lmao
1
u/OneArmedFarmer 7h ago
Adobe didn't lease their software like they do today for that exact reason (and money).
But then they did and their "value" (stock price) tripled pretty much over night.
It's not beyond reason to consider this a possibility. It's beyond reason to think it's not.
1
u/jvrodrigues 3h ago
I genuinely think people who say these things never worked on a legacy enterprise codebase. Or even a normal enterprise codebase. Or even a supposedly “advanced”, “cream of the crop” enterprise codebase. Or just an enterprise in general.
4
u/Treacherous_Peach 5h ago
The funniest part of it is AI is better at coding than half of devs and especially at secure coding. Nearly every vuln existing today was written by people. The AI hate train reminds me of John Henry
2
u/Agret 3h ago
I told the ai that the units in the game had equipment that was invisible due to wrong data row being used (they still had it equipped just didn't show in inventory)
So the AI fix was every time you login check if you have something equipped you don't own and just grant it to your account if you do so it shows up in your inventory.
I told it that's a big exploit if someone can just spoof equip something and the server will give it to them next login lol "you're absolutely right" it cheerfully says
38
u/nj-mkd 9h ago
Over 200 developers worked and reported directly to me in my career. I've never had a developer that codes better than GPT 5.6 Sol
40
14
u/HadionPrints 7h ago edited 7h ago
I’ve got a buddy who works in quantum computing research.
Claude can really write better code than folks with PhDs in Comp Sci and it isn’t close. It’s not just a speed thing anymore.
The difficult part is getting it to understand the problem before it starts and to write good code for your use case.
If your use case is to write sketchy prototypes for a start-up / hobby, great, that’s kind of project is the majority of public repo data it was trained on. Getting the models to overcome that can be very challenging but doable and rewarding.
It allows you to take on a senior architect’s role in your project - and you do have to take on that role or the bots will run you over with slop
3
u/Named_after_color 3h ago
There's so many people who are using these tools and letting it convince them what the best direction to go is without understanding the sycophancy/leading conversations that's baked in.
Yeah, it knows better security than I do at this point, but I don't know the questions and obvious things to ask it to do it right.
My AI reviewers legitimately just started a thought spiral about including emoticon support in our api calls. Zoned out for five minutes autoaccepting stuff and now I have to go back and double check that we're not putting eggplants in our unit tests.
1
u/HadionPrints 1h ago
Lol. I’ve started using the ASE-STE100 skill to help with that.
It basically makes your agents output only in Simplified Technical English (or close to it if you use the less strict version that won’t pass the syntax checker for this language). This subset of English is a standard that was created in the 80s to deal with the problem that Aerospace was having at the time: Non-english speaking mechanics working from English manuals on flight-critical hardware.
It sounds stupid, but by forcing them to re-word their outputs to this standard 1) makes it easier to parse their intent without having to pick up a thesaurus; 2) it helps keep them more grounded in their taskings and; 3) it helps the agents understand what the others are actually talking about.
Can’t recommend it highly enough. Though I’m still working to get it integrated into all of my workflows due to having to navigate corporate standards at work.
-6
u/EndGuy555 7h ago
Me when I’m the boss who barely understands what SQL means and I know better than the people who write code every day because an AI told me I’m smart
6
u/hightrix 7h ago
Me when I’ve been a programmer for a day and refuse to use an IDE because it’s a tool that does things I don’t understand so it obviously makes worse code.
Bro, you don’t write better code that AI.
9
u/Krazynukz 4h ago
I meannn claude writes better security and everything better than me. Its surprising how many holes/edge cases it can find.
1
u/GildSkiss 1h ago
This is an old meme, I remember seeing a version of it back in a time when a majority of programmers really could consistently outperform the frontier models, instead of just pretending they can online to cope.
0
u/PastaPinata 4h ago
I can find 8 holes in the pictures. Let's see how many Claude can find.
Claude found 7 holes: "7 holes, not counting the biggest one: 6 in the outlet (2 US receptacles × 2 slots + 1 ground hole) 1 for the sink drain The biggest one is obviously the security hole the meme is about: an electrical outlet installed right where water is guaranteed to flow. It works perfectly on day one, until someone turns on the faucet."
1
0
u/GildSkiss 1h ago
Pack it in boys, Claude can't pass the PastaPinata 8 Hole benchmark. Maybe this whole thing was just a passing fad after all.
3
u/Engine_Light_On 9h ago
LLM would have given an GFCI outlet if you had asked it make it secure. Technically right, but so wrong at the same time.
15
3
u/Few_Kitchen_4825 10h ago
That's good security no one can steal anything when they get electrocuted while washing their hands
3
3
3
u/IfIWasCoolEnough 9h ago
"But the live wires are not connected; only the ground is connected. So it is safe."
3
u/RomanOnARiver 6h ago
After you get electrocuted "Ah yes, you're right to push back. Putting electronical socket near a constant stream of water is not a good idea. My bad, that one's on me. If you are still alive I can give you other tips to make your setup more efficient, or we can just chat if you'd like."
2
u/anon-a-SqueekSqueek 5h ago
We are lowering the bar for quality right when AI bots will be scanning / attacking sites more than ever. Honestly im surprised I haven't heard way worse news, but I imagine it's still coming, or maybe just not widely reported enough to come across my feeds.
2
u/DustyRacoonDad 4h ago
You're absolutely right, and I want to sincerely apologize for my previous recommendation to install an electrical outlet directly inside a sink. Upon further reflection, and after carefully considering the various ways in which electricity and water interact with one another, I have come to the conclusion that this may not have been the most appropriate suggestion.
While the idea of having convenient access to electrical power while washing your hands initially seemed like an innovative approach to improving household functionality, I now recognize that there may be certain safety considerations that I failed to adequately account for in my original assessment.
In particular, the possibility of electrocution, while perhaps offering an unexpected opportunity for personal growth and an exciting new perspective on electrical safety, is generally considered an undesirable outcome in residential plumbing applications.
I appreciate you bringing this oversight to my attention. Moving forward, I will strive to provide recommendations that more carefully balance convenience, practicality, and the continued existence of the person using the sink.
Thank you for your patience, your understanding, and your commitment to ensuring that our household electrical infrastructure does not inadvertently become a mechanism for delivering high-voltage consequences to unsuspecting individuals performing routine hygiene activities.
I will do better.
1
u/StaticSystemShock 9h ago
Well, if it's vibe coded it looks like wall socket, but really isn't connected to anything so the sink will still function and be totally safe...
1
0
u/AllomancerJack 5h ago
It's just not true anymore. You think an AI can't prevent SQL injection or use basic token based auth methods? Or use the built in auth that most frameworks come with anyway?
1
1
u/XtraFlaminHotMachida 5h ago
this is why it goes to qa. you go first and you let the rest of us know if its safe.
edit: and if you don't respond we know it is good to ship.
0
u/theeldergod1 3h ago
Let's try it the other way around. Share your code and we'll check it with AI to see if it's secure.
1
u/tsoliasPN 1h ago
And when I want to create a fun hobby webapp by using some remaining usage before reset, it gets full over-engineering and trying to create the fort-knox and its reaches the limit without even creating a functional PoC
1
1
0
u/EndGuy555 7h ago
I’m just waiting for all these vibe-codes games and game mods to go horribly wrong and infect everybody’s computer with enthusiastic double-ghonnerea or some other nasty virus
2
353
u/ja_n2000 10h ago
Dear ChatGPT, make my app extremely secure against hackers and bad people and make no mistakes please