• monkeyslikebananas2@lemmy.world
    link
    fedilink
    English
    arrow-up
    10
    ·
    edit-2
    11 hours ago

    Ok. Looks like the process just needs to do more testing/validation in CI.

    What’s your alternative? just stop progress here? No more new things?

    • keisatsu@infosec.pub
      link
      fedilink
      English
      arrow-up
      44
      ·
      11 hours ago

      How about we keep relying on deterministic tooling that are not built on stolen data and don’t fuck the economy and the environment at the same time? How about putting a fraction of the money invested i LLMs into SAST and DAST tools? Maybe a dollar or two for fuzz testers? How about we look at projects like curl and build safeguards into the project to avoid footguns?

      • monkeyslikebananas2@lemmy.world
        link
        fedilink
        English
        arrow-up
        8
        ·
        10 hours ago

        I’m not opposed, that honestly sounds good. Now, let’s wish in one hand and shit in the other and see which fills up first.

        People will do what they do.

        I run small local models, I do a lot of what you are saying. However this technology and process is new. Yeah capitalism will fuck everything up but you can’t control people.