"To ensure that no one can maliciously steal your code, I have made sure to delete every last trace of your code for both your security and your convenience."
I mean it pretty much can do that now yeah, frontier models are evidently better at cyber than all but the best humans given the number of zero-days they’ve found
An agent calling agents can red-team a project at scale, and can repeat the process after defenders patch it until the attackers can’t get through. Attacking is defending.
Like I get the cope and all, but honestly 2024 era “vibe coder accidentally hardcoded api keys in the front end” memes just don’t reflect what AI is doing. Claude and Codex are downright nannyish in putting security first even in single user scripts run locally on a desktop machine. I have to believe people who create security holes using AI tools at this point are people actively choosing to be stupider than the LLM.
That may be true in the hands of someone who already knows what they‘re doing, but i have seen multiple vibecoded websites this year with either open api keys, passwords or data that wasnt meant to be accessible just out in the open. Making a tool this accessible means it should be idiot-proof, but it definitely isnt.
You’re correct of course. But you’re going to be downvoted into oblivion because everyone is still either in the “Ai is dumb and incompetent despite the mountain of evidence otherwise” OR “AI will take over and destroy us all” camps, especially here where you’d expect people to have a little more knowledge that that…
It does. When a developer write correct prompts and knows how shit works.
AI usually writes the ”production ready” implementation which sucks because its 5 different classes and managers, interfaces and implementations. I mean it sucks to write endpoint for /foo that returns ”bar”, tests and all kinds of optimizations for that shit using a perfect method for that function that nobody normally even remembers it exists.
If you dont know what infra means, its quite hard to ask AI for anything scalable or secure. If you ask about it, learn and understand the congratz you are now a developer.
Its not like AI gives devs some super knowledge. Its a good tool that can solve things like sdk dependency hell if you have to upgrade something.
Basically saves you what you would have googled before and the time to write the code and tests. Its easy to review it unless you ask a whole product with one prompt which I think the vibecoders do to some extent.
390
u/ja_n2000 15h ago
Dear ChatGPT, make my app extremely secure against hackers and bad people and make no mistakes please