Thread

1. intrepidsoldier · 1790914300 · focus · HN ↗

   Just the beginning. AI is going to expose how fragile the entire computing infrastructure in our world is.

   1. ankurdhama · 1790914599 · focus · HN ↗

      Does this also mean the code generated and reviewed by LLMs will not have such issues going forward?

      1. trollbridge · 1790914892 · focus · HN ↗

         Quite the opposite, particularly when the biggest vendors of coding agents insist on not allowing their models to be used to check the code they generate for security issues.

         1. miohtama · 1790916265 · focus · HN ↗

            Why stop there? We should regulate who is allowed to write code in the first place!

            1. autoexec · 1790916840 · focus · HN ↗

               Easily done if everyone can be convinced that learning to write code is pointless since you can just pay an AI company for access to a chatbot that will write it for you.

               Fortunately there are people who write software for fun so there will always be some people who would rather do it themselves.

            2. bsoqk · 1790931811 · focus · HN ↗

               So, like professional orders in Europe? Thankfully everybody agreed that writing code is not engineering so this isn't mandated by law, but we were this close.

               1. tancop · 1790943729 · focus · HN ↗

                  You don't need a permit or degree to draw up plans, just to write your name on the official version and get it implemented in the physical world. It's closer to deploying code than writing.

                  1. bsoqk · 1790945057 · focus · HN ↗

                     We have a lot of that in Europe. Parasite professions. Someone who does nothing but charges a lot for his signature.
            3. jumploops · 1790932139 · focus · HN ↗

               “And that was how CS became a real engineering degree”
            4. trollbridge · 1790953987 · focus · HN ↗

               They sort of already do; the commercial American providers all require you to be 18 to sign up for a plan capable of agentic coding.

               So, I guess people under 18 aren't allowed to learn to program anymore.

         2. enraged_camel · 1790916896 · focus · HN ↗

            I've been able to use Opus 5.5 and Fable 5.1 for defensive security audits without any issues. They cannot do offensive tasks like pen-testing but in a lot of cases that's not a big shortcoming.

            1. whiskey-one · 1790945426 · focus · HN ↗

               Any tips / online resources how to best utilize for defensive reviews?
            2. trollbridge · 1790954036 · focus · HN ↗

               I've repeatedly slammed into walls doing very basic tasks. It can do a dumbed-down security audit, but fails to do offensive tasks against my own codebase which is frankly how you use a model like this effectively.

Unofficial Hacker News client; not affiliated with Y Combinator.