Readit News logoReadit News
rpicard commented on LLMs and coding agents are a security nightmare   garymarcus.substack.com/p... · Posted by u/flail
tptacek · 6 days ago
There are plenty of security people on the other side of this issue; they're just not making news, because the way you make news in security is by announcing vulnerabilities. By way of example, last I checked, Dave Aitel was at OpenAI.
rpicard · 6 days ago
Fair! I’ve been surprised in some cases. I’m thinking specifically of a handful of conversations I was in or around during the Vegas cons.

I might also be hyper sensitive to the cynicism. It tends to bug me more than it probably should.

rpicard commented on LLMs and coding agents are a security nightmare   garymarcus.substack.com/p... · Posted by u/flail
philipp-gayret · 6 days ago
What metric would you measure to determine whether a fully AI-based flow is better than a competent human engineer? And how much would you like to bet?
rpicard · 6 days ago
No clue, and $1.
rpicard commented on LLMs and coding agents are a security nightmare   garymarcus.substack.com/p... · Posted by u/flail
kriops · 6 days ago
> I think of it more like self driving cars.

Analogous to the way I think of self-driving cars is the way I think of fusion: perpetually a few years away from a 'real' breakthrough.

There is currently no reason to believe that LLMs cannot acquire the ability to write secure code in the most prevalent use cases. However, this is contingent upon the availability of appropriate tooling, likely a Rust-like compiler. Furthermore, there's no reason to think that LLMs will become useful tools for validating the security of applications at either the model or implementation level—though they can be useful for detecting quick wins.

rpicard · 6 days ago
My car can drive itself today.
rpicard commented on LLMs and coding agents are a security nightmare   garymarcus.substack.com/p... · Posted by u/flail
rpicard · 6 days ago
I’ve noticed a strong negative streak in the security community around LLMs. Lots of comments about how they’ll just generate more vulnerabilities, “junk code”, etc.

It seems very short sighted.

I think of it more like self driving cars. I expect the error rate to quickly become lower than humans.

Maybe in a couple of years we’ll consider it irresponsible not to write security and safety critical code with frontier LLMs.

rpicard commented on Ask HN: Any active COBOL devs here? What are you working on?    · Posted by u/_false
rpicard · a month ago
I’m not affiliated, but this made me think of this AI for COBOL startup: https://www.cobolcopilot.com/

For some reason I think we’re all drawn to the idea of working with an older language. I wonder why!

rpicard commented on Git Notes: Git's coolest, most unloved­ feature (2022)   tylercipriani.com/blog/20... · Posted by u/Delgan
rpicard · 2 months ago
This would be a cool place for LLMs to store a summary of the prompts used to generate the code in order to make it easier for other LLMs and humans to pick up where they left off.
rpicard commented on Phoenician culture spread mainly through cultural exchange   mpg.de/24574685/0422-evan... · Posted by u/gmays
rpicard · 4 months ago
I’m pretty sure this is an AI bot of some kind, especially after reviewing its history.
rpicard commented on My sourdough starter has twins   brainbaking.com/post/2025... · Posted by u/Tomte
torvald · 4 months ago
> If you keep your starter in a big jar, it'll just go to waste. Keep it small and you'll never need to throw any away.

I tend to make «sourdough discard crackers» if I have leftovers. It works well timing wise, I'm in the kitchen doing the initial stretching of my loaf anyways.

rpicard · 4 months ago
My wife makes sourdough discard cookies and they’re amazing.
rpicard commented on What Air Defenses Do the Houthis in Yemen Have?   twz.com/news-features/wha... · Posted by u/nradov
sokoloff · 4 months ago
I misread the domain and couldn't figure out "why the hell is TMZ trying to cover air defenses in Yemen?!?!"
rpicard · 4 months ago
Funny enough I read it as Wiz and was just as confused.
rpicard commented on How to quickly charge your smartphone: fast charging technologies in detail   eb43.github.io/articles/f... · Posted by u/uycyp
tgsovlerkhgsel · 4 months ago
If you're buying modern phones and expect the charger to also be used with your future phone, I'd look for a USB PD capable power supply with PPS support. (Edit: Many of the phone makers that are listed as having proprietary technologies support PD on newer phones. Since the EU mandates USB PD, I would expect the vast majority of new devices to support it at least well enough that you won't need anything else.)

Rather than 10 of a given charger, consider a smaller number of GaN chargers with multiple ports, but be aware that many of the "smart" ones will reset all ports if any port is reconnected or renegotiates. I have a "smart" charger capable of outputting 100 W on one port or some mix of wattages on multiple ports (mainly for travel), and a "dumb" multi-port charger that I use both for slow charging of phones and for powering IoT devices that I don't want to be reset. The latter simply has multiple USB-A ports, which lets me charge almost anything - either with an A-to-C cable, or A-to-whatever-that-device-needs (either Micro-USB, Mini-USB, or something proprietary).

rpicard · 4 months ago
Good advice thank you. Makes me think maybe a slow charging set up by the bed and a fast charger down in the living room / kitchen / for travel.

Then maybe another slow charger for all those miscellaneous things around the house.

u/rpicard

KarmaCake day1111November 11, 2011
About
Rob Picard

Running Observa, a security consulting firm

View Original