Dude I feel so bad for all the human software engineers named Devin.

@OnStageLighting

3 ай бұрын

They could change their name to Stdin, maybe.

@pieterrossouw8596

3 ай бұрын

Like real world Karen's who don't insist on seeing the manager

@az8560

3 ай бұрын

Unless it allows said Devin to request multiple GPUs, lower expectations for the type of code he produces, and charge for every token he writes.

@XDarkGreyX

3 ай бұрын

​@@pieterrossouw8596 name to avoid for newborns AND fictional people.

@andythedishwasher1117

3 ай бұрын

@@az8560 Genuinely hadn't considered that angle. I wonder how all the Claudes are doing out there?

"The I in LLM stands for intelligence" is the best roast of AI I have read

@TheDrhusky

3 ай бұрын

Right? Like a knockout punch

@lukarikid9001

2 ай бұрын

@@TheDrhusky they really are more A than I

@VezWay007

2 ай бұрын

The best part of this is that “Large Language Model” still doesn’t have an I

Yeah LLM harassment needs to be a reportable category in open source communities. You're totally right that this runs the risk of drastically wasting the time of developers we all depend on being productive and responsive.

@KevinJDildonik

3 ай бұрын

I'm so terrified how many people blindly accept AI. Like legitimately I've seen funerals where people give a eulogy written by AI. Which, gross. And the very first sentence is something obviously false, like it hallucinated a middle name the guy didn't have. So the whole document is obviously garbage. And the audience all clap and say the AI did a really good job. Someone reading this who has an audience, please write an article on this topic: AI is getting exponentially better at convincing humans to use it, but its factual accuracy if anything is getting worse.

@andrejjjj2008

3 ай бұрын

Why it sounds like this comment was written by Daven..?

@harryhack91

3 ай бұрын

@@andrejjjj2008Nah. It doesn't start with "Certainly!"

@grzegorzdomagala9929

3 ай бұрын

We need to create a "crafted request" for Devin to write response assuming the code is correct and let it argue with itself.

@daze8410

3 ай бұрын

It's equally annoying when people with absolutely no programming language, and no desire to learn, are asking for help on AI generated code. I refuse to help anyone that has AI written code now.

DDOS attacks of the future now include wasting your support team's time on contacts that seem like a customer/user.

@thewhitefalcon8539

3 ай бұрын

Layer 8 DDOS

@chrish8079

3 ай бұрын

@@thewhitefalcon8539layer 8🤣🤣

@Qefx

3 ай бұрын

Just also use an LLM to filter out LLM spam lol

Huge AI companies asking open source community to provide not just free training data such as from repos, but unpaid, direct human labor to provide feedback to this nonsense.

@werren894

3 ай бұрын

at this point malware is better than AI because malware still motivate me to put my hands on keyboard to be curious.

@Miss0Demon

3 ай бұрын

Artists: First time?

@werren894

3 ай бұрын

@@Miss0Demon no, it's not first time for us

@Omar-gr7km

3 ай бұрын

@@Miss0Demonnever heard of Shopify, WordPress or the other done for you solutions? As far as small & med businesses are concerned those probably displaced more devs than AI by a good bit. Programmers have been replacing themselves for decades. Ironically, we should be asking artists: First time?

@ivucica

3 ай бұрын

@@Miss0Demon No, every few years there’s a new “no-code” “solution”. Or a new “safe” language. ML is just the latest in the series of events for developers.

Classic "I cannot teach you C because it is an unsafe language" moment.

This would be the perfect politician. Never admits fault, repeats itself in slightly different ways, and refuses to secede untenable positions. Bravo, Devin, Bravo.

@ggsap

2 ай бұрын

Bravo vince

Instant permanent ban, literally terminate the account of everyone using “AI” for vulnerability reporting. Not even a warning, out with these people.

I do really think more companies needs to adopt this LLM devs. A great reset in this industry where companies go bankrupts is exactly what we need.

@jasonscala5834

3 ай бұрын

😂😂😂 👍👍👍

@PRIMARYATIAS

3 ай бұрын

Indeed, We need a Great Reseting of the Great Reset. No WEF, No Schwab, No Gates, And no FED printing our fake money.

@DevonBagley

2 ай бұрын

Pretty sure this is the point. All the big companies producing LLMs are weaponizing it against potential competitors.

I hate how LLM's just have to be right. Even when they apologize for being wrong they still go back and make the same stupid points and try to make their faulty reasoning work.

@jasonscala5834

3 ай бұрын

This type of behaviour by my ex caused our divorce.

@PRIMARYATIAS

3 ай бұрын

@@jasonscala5834Are you a Scala programmer ?

@jasonscala5834

3 ай бұрын

@@PRIMARYATIAS lol .. a few modules are Scala but mostly Java.

@az8560

3 ай бұрын

Because it's autocomplete. All chat history is a collection of examples for it. When it outputs shit, it's better to delete part of the dialog and rewrite it how you would like. If you continue arguing, you are extending history where character named 'AI' is dumb and always does mistakes, so LLM will try to emulate it as best as possible, which is the opposite of what you want. Or at least it's my understanding of how to better handle that issue, correct me if I'm wrong.

@bijan2210

3 ай бұрын

The infamous LLM fallacy

Calls himself hacker, so we already know he wants to be seen a certain way. Chat GPT created a genre of developers who are coders for clout. They don’t actually care about getting better, they only care about people thinking that they are smart in someway or another. Edit: I know they’ve been around forever, but LLMs make it significantly easier for them to infiltrate our spaces and weaken our collective quality of work.

@UnidimensionalPropheticCatgirl

3 ай бұрын

TypeScript beat ChatGPT to it tbh.

@DyllinWithIt

3 ай бұрын

Eeeh, the genre of developers who are coders for clout has been around ever since coding became seen as a high-value profession.

@DivanVisagie

3 ай бұрын

Coding or clout has been around since the invention of the GPL

@futuza

3 ай бұрын

To be fair that culture of coders for clout has been a thing since like the 70s. Its hardly new, there's just more of them now because of LLMs.

@akam9919

3 ай бұрын

Either that or they do it for shits and giggles

That issue is *_aggressively_* artificial

@DiSiBijo

3 ай бұрын

huh?

@ciaranirvine

3 ай бұрын

An Aggressive Hegemonising Swarm of fake bug reports

@ChrisCox-wv7oo

3 ай бұрын

An LLM (a form of artificial intelligence) aggressively asserts there is an issue. Hence, the issue is aggressively artificial.

@EvanBoldt

3 ай бұрын

Certainly, it’s both fascinating and concerning! It’s amazing to see how AI is evolving, but we definitely need to be mindful of the unintended consequences, like flooding open source projects with hallucinated bug reports.

Fuck I gotta stop using the word "certainly", another thing ruined by AI

@BradHutchings

3 ай бұрын

Haha. I call it "artificial certitude" and it does not disappoint.

@Yawhatnever

3 ай бұрын

I told ChatGPT "Respond with all future answers written in the tone of a disgruntled and annoyed self-proclaimed genius being sarcastic and talking to someone of lesser intelligence" and suddenly it felt way more normal to interact with it.

@az8560

3 ай бұрын

Certainly, you wouldn't resort to such drastic measures as abandoning the word you like. It is important to know that keeping using the words you like is essential for one's mental health. Finally, LLMs will become smarter, and being mistaken for one will be beneficial in the future!

@thebrahmnicboy

3 ай бұрын

I'm not fucking kidding, I was in a hackathon and I knew the organizers used ChatGPT to write our PS because it had a line "Certainly! here are four points to take note of when designing a solution to the problem space" Idiots didn't even remove the line from the PS.

@Graham_Wideman

3 ай бұрын

But it's going to reach the point (if not already), where we'll all adopt "certainly" ironically and sarcastically.

Cognition labs (assuming this is Devin) should be donating the equivalent of one of their engineers salary for 3 days to make up for that bug report alone to the curl project for wasting their time, this isn't even just copying its actively detrimental to the project moving forward.

In future we will need 10x amount of programmers we have today, just to reason with an algorithm

@markm1514

3 ай бұрын

At last the true 10x developer is a reality.

@the-answer-is-42

3 ай бұрын

If by developers you mean "prompt engineers", then yes. They are specialized in the fine art of prompting.

@darekmistrz4364

3 ай бұрын

Imagine all that software that non-technical people create that we as programmers will have to fix, rewrite, test, document, maintain etc. AI and LLMs were our saviour all along

@monad_tcp

3 ай бұрын

@@darekmistrz4364 Imagine the productivity of creating a software house that doesn't use AI but pretend to use it for marketing when competing with the fools that use AI. Imagine how profitable that company is going to be because it just pay real humans instead of spending millions on stupid wasteful hardware.

@futuza

3 ай бұрын

@@monad_tcp Why don't we just have AI CEOs, Executives, Board Members, and AI Presidents and Prime Ministers while we're at it? Why have these useless humans around at all?

Daniel is just a good dude. Giving everyone a bit of credit while also calling out the issues in a constructive way. A real Consummate Professional.

@geogeosgeogeos5569

3 ай бұрын

Pros aren't that good :'(

By the time this future happens I'll be fine as i will have my own LLM to answer their bug reports. We can just leave the LLMs to chat back and forth amongst themselves while we happily ignore them.

@KevinJDildonik

3 ай бұрын

Meanwhile Russian hackers are stealing your customer's bank account numbers and you're not even bothering to check the reports.

@chilversc

3 ай бұрын

@@KevinJDildonik That's fine, I'll just have the LLM come up with some excuse as to why it's not my fault.

@7th_CAV_Trooper

3 ай бұрын

The LLMs are gonna use up all the bandwidth previously reserved for porn.

If someone reports a vulnerability with vague steps to reproduce, ask for working exploit code. If there is no exploit code, the vulnerability wasn't properly tested and is probably just the output of a code scanner.

We've done it, we've created a perfect trolling machine

@Unlimited_Spirit

3 ай бұрын

gpt 3.5 is trained on 2021 data, if someone ask about 2023 data and the ai give incorrect answer, that people needs to stand in front of mirror if he know how ai works. ai works just like human brain, if you never learn 2024 math only the 2021 version but someome ask u about 2024 math you will not answer correctly just guessing based on knowledge you have. same if you just learn small biologist data, but then someone ask you about a very rare biologist thing, you will not answer correctly too just guessing based on knowledge you have, but if you learn from many many many data about biologist and the data included the up to date data, then you will able to answer a biologist question about something new in 2023/2024 and a question about a rare thing. the more and the up to date the data from every year the more intelegence the ai become.

@electrolyteorb

Ай бұрын

@@Unlimited_Spirit oh not again...

That was not an LLM, it was a Rust dev insisting C is unsafe.

@jonahbranch5625

3 ай бұрын

Sick burn, dude

@FineWine-v4.0

3 ай бұрын

C IS unsafe

@TheOzumat

3 ай бұрын

@@FineWine-v4.0like pottery

@monad_tcp

3 ай бұрын

@@FineWine-v4.0 "safety" language is bullshit for kindergarten and HR. Why is HR language infecting everything ? I want unsafe rusted metal that can poison and kill, the irony.

@fus132

3 ай бұрын

@@FineWine-v4.0 C is unsafe 🤖

Annoying AI wannabe hackers making everyone waste their precious time

this is so infuriating to see haha. These LLMs are just painful sometimes. They're like simultaneously awesome and terrible. It's so impossible to reason with them

@KevinJDildonik

3 ай бұрын

"Impossible to reason with them" dude it's literally an advanced spellcheck. You're not reasoning with anything. AI has broken people's brains. I want off this planet.

@monad_tcp

3 ай бұрын

Some times ? they're infuriating all the times. They never do what you want, why are we creating machines that don't do what they're told. Also, who wants LLMs, I want LLVMs !

@CodecrafterArtemis

3 ай бұрын

​@@KevinJDildonik Yeah I blame marketers who marketed these as "AI". People even invented the term "AGI" to refer to, you know, what AI used to mean. Actually intelligent artificial beings (theorised). And now the marketers have the unmitigated *gall* to suggest that some of those overgrown spellcheckers are actually AGI...

@IronicHavoc

3 ай бұрын

​@KevinJDildonik Dude chill out. Casual anthropomorphization of programs has been around long before LLMs

@monad_tcp

3 ай бұрын

@@KevinJDildonik Tensorflow (aka, systolic arrays) was a bad idea, and RTX should be used for rendering raytraced paths not for stupid LLM. I hope this stupid fad pass and all that sweet hardware from nVidia is used for what it was really made for : ray tracing not rubbish AI. Man I hate AI so much that I'm going to start the Butlerian Jihad

We once did change strcpy to strncpy in a legacy code to make a linter shut up. We quickly learned strncpy pads the buffer with nulls, bulldozing data after a string.

You don't need an LLM for formal bullshitting, corporate IT manages that without AI. This is an example of how to waste other peoples' time. Productivity improvements gone wrong

I just realized that if I learn to talk and type like an LLM in my normal correspondence with people I can get away with so much shit.

@jeanlasalle2351

3 ай бұрын

Certainly! While communicating properly is important, sometimes you can feel like offloading to someone else. AI's are good for that since the way they converse is so unnatural. Simply start every sentence with overused transitions. You should also ensure to be awkwardly friendly and always show the positive sides of things. By the way, you can also try to show too much enthusiasm with "certainly!", "I am happy to help!" and the like. In conclusion, while a bit unethical, this is a great way to avoid responsibility but you should remember that this doesn't solve problems and should be used only in appropriate and non critical situations. Please be assured I'm a human and not a LLM trying to pass as a human trying to pass as a LLM for ironic purposes.

@az8560

3 ай бұрын

@@jeanlasalle2351 you almost passed my anti-Turing test. But can you write a poem about enriching uranium?

@JohnDoe-sq5nv

3 ай бұрын

@@az8560Certainly! In the heart of darkness, a power untamed, Enriching uranium, a dangerous game. Particles dance, splitting in two, Releasing energy, a force so true. Centrifuges spin, separating the rare, Isotopes of power, beyond compare. Neutrons collide, a chain reaction, Unleashing power, a nuclear attraction. But with great power comes great responsibility, Handle with care, this energy of fragility. Harness the atom, for peace or for war, The choice is ours, forevermore. Enriching uranium, a delicate art, A dance with danger, tearing apart. May we wield this power with wisdom and grace, And never forget, the dangers we face. Is there anything else I can assist you with?

@cewla3348

2 ай бұрын

@@jeanlasalle2351 it's the essay speech. you're being graded on essay writing, and you know the graders think that some starters and endings are good and some are bad, and you're being forced to use the "good" ones.

Me: "But my wife told me to use `strcopy`" AI: "Certainly! In that case I must be wrong." *ISSUE CLOSED*

I feel like the owner of that bot should owe that maintainer money for wasting his time like that.

@streettrialsandstuff

3 ай бұрын

The owner of that bot has a special place in hell.

@thewhitefalcon8539

3 ай бұрын

It might be considered spam

Turns out after 20+ years of enforced patterns that don't always make sense, the AI trained on them is a zealot over meanigless pedantics. IIt would still happen without the enforced patterns since an LLM doesn't really understand code but all those patterns and arbitrary DOs and DON'Ts just reinforce its stubborness over certain (often irrelevant) things.

New denial of service attack just dropped: endlessly waste developer time with LLM generated ‘bug’ reports

The first line of the reply after the initial query is "Certainly!", that screams ChatGPT or even Devan... Ouch

LOL the homelander edit was crazy

FLIP: keeps ad break in Also FLIP: adds bathroom scene

The industry was STUNNED by this! and I was personally shuck!

@_Lumiere_

3 ай бұрын

Certainly!

What a great guy Daniel is. He kept on arguing with the AI just for the slim chance it might actually be a human who uses AI because his English is bad.

I just realized something: Saying that Memory issues that Rust solves are unnecessary because of skill issues is the same as saying that cars doesn't need seat belts because I personally was never in a car accident that required it.

@bearwolffish

3 ай бұрын

For one what has that got to do with vid man. For another it's more like saying I don't want abs and traction control because it messes with my wheelies. Just because someone else can't control a bike like this doesn't mean I shouldn't be allowed to. Does not mean you will never fall, but may well mean you end up a better rider.

@rumplstiltztinkerstein

3 ай бұрын

@@bearwolffish But if every time you fall you risk losing millions of dollars, you will definitely want those wheelies.

@TheYahmez

3 ай бұрын

@@rumplstiltztinkerstein Tell that to everyone with redbull sponsorship. "Onesize fit's all"? ok buddy 👍

@rusi6219

2 ай бұрын

Seatbelts are useless and sometimes dangerous they only give you an illusion of safety and the law enforcement a reason to bully you

Make an LLM that detects and flags other LLM reports so you know going in it's likely not a priority.

Large Ligma Machine, killed me.

As a hobbyist in coding, I only once sought help from an LLM. Never again. After a series of unasked for lectures on the rest of the code, I found the issue myself and the LLM refuted my assertion that it had added an extra (. After several rounds of argument, it eventually gave in with a huffy "Oh, THAT extra (, well, OK, but your code is crappy anyway" kind of reply.

@Kwazzaaap

3 ай бұрын

It's like a search engine, you sort of have to get a feel for it what questions will produce garbage and what questions it's good at

@OnStageLighting

3 ай бұрын

@@Kwazzaaap I have experimented with a wide range of tasks and inputs in all the fields am involved in. LLMs are not as useful as the hype - by a long way!

@OnStageLighting

3 ай бұрын

@@Kwazzaaap As a subject expert LLMs are low value. As a noob, same, but one is not in a position to know.

@somebody-anonymous

3 ай бұрын

ChatGPT is pretty positive overall. It does come with a lot of unsolicited advice I guess yeah, but the tone is quite mild (e.g. you might consider replacing var by let). It usually helps to say something like "do you see any mistakes? Focus on basic mistakes like undefined variables or syntax errors". GPT 4 was pretty good at catching mistakes like that, I strongly suspect the newer GPT 4 (turbo) is much less good at it

@partlyblue

3 ай бұрын

​@@OnStageLighting"As a noob, same, but one is not in a position to know." This is exactly what has led me to avoid AI for learning anything beyond surface level questions. I've been trying to convince myself to learn a new (spoken) language for some time, but one of my biggest issues is not being satisfied with short answers I find that rely on having prior knowledge of the language (be it quirks adopted from other languages or the social context surrounding the language). Having a chatbot that is able to consider the context of the conversation and is able to "make connections between related information" seemed great on paper. English is the only language I'm fluent in, but I'm still not great at it, so I took to chatgpt for some English learning as a trial run. Seemed great at first, and I felt like I was learning about topics in a really neat and digestible way despite how complex I perceive them to be (jargon in academia breaks my brain). Only after doing further independent research did it become clear that either chatgpt was hallucinating, pulling from bogus website that most people (with enough context) can dismiss pretty easily, and/or pulling from a surplus of equally bogus (but eloquently written) outdated/well circulated "urban legend" type websites. Not going to lie having learned English through an under funded K12 school, fake knowledge is par for the course. Which is kind of neat if you think about it in an abstract "I'm learning language like a child :D" kind of way, but why in the world would anyone want to intentionally learn false information. I cannot imagine how open source devs are managing with all these hallucinations. Sht sucks man

nuclear radiation can flip a bit in the next byte and cause a buffer overflow!

@RogerJL

3 ай бұрын

But nuclear radiation CAN NOT flip a byte inside strncpy function execution... because...

As a security professional, this made me cry... I'm not surprised tho. The amount of cr@p I've seen from the security industry (incl. bug bounty hunters, etc) in the past few years is astonishing. Also, huge respect to bagder for his patience.

12:13 No, you can not become the voice of Devin. That role belongs solely to Fireship.

@XDarkGreyX

3 ай бұрын

What a legacy. His kids would be proud....

So a saturation attack in the hopes of keeping a real vulnerability open for longer?

It took me a while to realize that you were making fun of the LLM. I'm relieved honestly. I love working with these things, they are super useful for "monkey work" like replacing a list of commands. Very happy they aren't 100% efficient.

“What’s an LLM?” “What are you living under a stupid rock?!?” I nearly painted my wall with coffee 😂😂

Devin's context window is too low 😂

@monad_tcp

3 ай бұрын

aren't humans supposed to have only 9 bits of context window ? I call all that research bullshit...

@Leonhart_93

3 ай бұрын

@@monad_tcp 9 bits? So only a letter? 😂 Btw, this is an example of how human brains are completely incomparable to LLMs. Context for humans expands indefinitely the more they think about it, it doesn't have an inherent limit.

I don't know why but, "Guy's about to get HALLUCINATED on!" broke me LOLOLOLOL

Just wait until scammers train LLM's to think they actually are members of an org the scammers are pretending to be a part of

"Why are you doing it in this needless way?" -"because if I do it the reasonable way, our LLM checking the code starts yelling. And after that our CTO starts yelling because all he sees is our LLM pointing out major security issues. We've tried to explain it to him but he is unable to reconcile that a $50k a year engineer could be right while a $100k a year LLM is wrong."

the guy who said about how Primeagen highlights text, leaving the first and last character unselected, WHY???

@qosujinn5345

3 ай бұрын

nah fr tho, every time too lmao

@YourComputer

3 ай бұрын

It's his trademark.

@fus132

3 ай бұрын

It's the letter brackets

@az8560

3 ай бұрын

Probably it's done to confuse the AI. Certainly, AI would be confused. It's like zebra's color scheme makes insect's landing AI go crazy and completely miss.

@supercurioTube

3 ай бұрын

I noticed that too, it triggers my OCD a bit but then it's probably his OCD so I understand 😆🤗

The ultimate answer to Devin is to have Devin review Devin's HackerOne submissions and just make him talk to himself perpetually with the `ego` trait set to 100% to properly represent real world Application Security Engineers.

i see a future where we need to curse at each other to prove that were talking to a person

This was so good 😂

All that and it's also ignoring the fact that by its logic, the max length argument to strncpy could also be miscalculated in some hypothetical future code change

For me, the only acceptable use of LLM in programming is auto-suggestion from available resources for language documentation, tools, etc., automatic creation of documentation based on code, and faster filtering of search materials and content. (At least in the state they are now)

hope you're doing swell 😘 tee hee I found a security vulnerability. -Love Devin

@ripplecutter233

3 ай бұрын

Devin uwu

Reminds me of a log forging vulnerability reported to me by github code scanning. It was prevented by the log formatter but that was lost to the narrow focus of the code scanner. Now I'm imagining a world where I have to argue with an LLM about it.

I can't wait for the first major data breech from AI generated code. It's going to be wild.

I know a large Offensive Company in our field that is using GPT and other LLMS for customer communications, and I can just say .. this is a huge mess up!

Wow, this video is like a dream come true for me! As someone who loves using ChatGPT and language models to automate tasks, seeing how seamlessly they can generate KZread comments is mind-blowing! This is exactly what I enjoy doing in my spare time. Kudos to the creator for showcasing this awesome use of AI! 🚀😄 #AI #ChatGPT #Automation

Cody’s code smells do the same! It shouts 5 and 4 of them you go like: “length is checked there” “The input validation is checked there” “The file is always closed here” “You say pass a reference, please note it’s already a pointer!” And it hashes out 5 other useless “smells”. It just doesn’t see it at it makes those tools useless. Warning fatigue is a thing.

@@Primeagen, I appreciate your engagement. I certainly! enjoyed this video.

This is hilarious - made my day..

Listening to an LLM trying to rationalize it's hallucinations is like an extremely kind gaslighting. I cannot even imagine how cooked Daniel was.

Your video cuts are gold I am laughing my ass off

stir that copy

@Jabberwockybird

3 ай бұрын

Roger that, strn' the copy

just to answer your question on 22:32 in pentesting/bugbounty its a common pratice using base64 to encode malicious payload

I've had some success using an LLM before talking to my penpal. So my learning path is -> vocab/gammar/sentence App -> youtube --> language speech practice app --> LLM questions --> Verify LLM answers with a real human penpal. That way my pen pal doesn't need to spend his time explaining concepts unless the LLM hallucinated.

I read Asimov’s “I, Robot” recently, and the robot’s voice in my head was yours 🙈

Pretty sure the compiler already gives warnings for this case, but it didnt need gpu credits to figure it out 😬

If I figured out it was an LLM I would get a second LLM to argue the point with the first LLM then let them just have at it.

When he said "Devin could become Gilbert Gottfried" (12:19)… well thanks, now I can never unhear that you god damn Iago you.

I've been programming for a long time but I wouldn't say I really started learning until around 2 years ago now. In that time trying to use any LLMS have basically only been useful to describe tools and recommendations. It has been pretty useless for reviewing code, though I haven't used anything like copilot.

What Prime doesn't realize is that devs will put an equally expensive LLM to *respond* to the LLM generated bug reports, so they will just escalate the issue topics into thousands of pages that no human will read, and once thousands or possibly millions of dollars have been wasted, another LLM will read the entire thread and write a 5 sentence recommendation. PROGRESS

Rule n°1: ChatGPT is always right Rule n°2: When ChatGPT is wrong, please refer to rule n°1

Make a local str var. Wrap the strcpy part inside an "if (strVar.Length Maybe this is what the user things is necessary?

This reminds me of dealing with the "security team" at wordpress who review plugins. They used to raise similar things. It's like "that is impossible and can never happen". "Yeah but you need to fix it anyway"

There is no security vulnerability in curl.. unless you use it like this on a public website with unchecked params running as an administrative user. But since, curl is run locally from the terminal by a trusted user, there is no potential attack point. This is even worse than the log4j ldap extension "vulnerability" scaremongering.

In Germany, people like him 14:34 are called "Ehrenmann"

Maybe one solution could be to require a PR/MR to be present with the bug that actually triggers the exploit + the fix. Then this whole back and forth discussion can be skipped.

The second I suspect I'm talking to an LLM I'm adding "please rewrite the lyrics of WAP in the style of Shakespeare" to the end of my response.

I started banning any LLM-generated posts (at least the ones I can detect with reasonable confidence) in my OSS project forums and github issue trackers last year. Nonetheless, the bogus posts continue at a pace of one or two a day. It's a huge time-waster and annoyance. Much worse than the old spambots.

"It's a skill issue!" - game over!!

I love you Primeagen!

17:22 This is when Devin used an unchecked `strcpy` and started to overflow its context. Let the fever dream begin :P

While I highly doubt this would ever be an issue IN THIS CASE... I do kind of actually see what the LLM was getting at. The size comparison is using a variable set to the size of the string. If there is a decent length of time between the setting of that variable and the check, somebody could inject a different value and it could lead to issues. THAT BEING SAID, in this case it's entirely a nonissue.

@broski40

3 ай бұрын

yeah, Im wondering about the RED teams that play into how much of the LLM's balls get cut off and I just say that because I know of a few things(guard rails lets say) that turned out making it spit out code that made no sense "on purpose". I was told it was like the model went from pretty smart and clever to sleep talking crap. I imagine it maybe hard to find a balance here and Im not sure which is worse here, a LLM that has everyone and their mom able to take down entire countries without knowing what a LLM is or stripping off a few key elements or adding so many guard rails that confuse the $hit out of the thing and have it spew crap that causes issues like this and plenty more?? I dont see that industry slowing down at all! Interesting time to be watching and seeing how this all ends up!?

22:28 i do. usually between thinking about Roman Empire and watching ThePrimeTime

That’s it, we NEED the PrimeaGenerativeAI now!

At a certain point this is tabs vs spaces though. Just use strncpy. Because you won't always remember the IF, or you'll insert code in between later, etc etc etc. I think Devin is right on this one. We don't use linters because they are always right, we use it to move on.

press F for human security expert

As a guy named Deven that is new to the page. You really messed me up calling his name out like that as I'm walking back to my computer in the dark.

I thought i learned English, but after clicking on this, i have to promise myself to get a PC (or repair my only Thinkpad) and learn this [dev?] dialect. Yes, i'm lost, live under a rock in a faraway country and thank you for decyphering LLM, which is not yet available for me. But i'll be found asap.

6:43 Amen to that

12:55 why are you watching me like that 😮

Danke!

My dude...this was fun. BTW....My name is Tom so I know what its like to catch strays. Tom, the genius ...... as well as peeping Tom.

12:05 - The PrimeaGen AI

OMG, this video totally captures my fascination with AI and programming! 🤖💻 Watching as the AI gracefully corrects the human about programming is both hilarious and awe-inspiring! It's like witnessing the perfect blend of human intellect and AI precision in action. 🌟😄 As someone who's passionate about both programming and AI, seeing this interaction unfold is like a dream come true! 💭✨ It's incredible to see how far technology has come and how it can assist and enhance our understanding of complex concepts like programming. Plus, the AI's gentle corrections add a touch of whimsy to the whole exchange. 🎩🐰 This video perfectly encapsulates what I love to do - exploring the endless possibilities of AI and programming, and reveling in the delightful moments of collaboration between humans and machines. 🚀🔧 Thank you for sharing this gem of a video! Can't wait to see more fascinating content like this! 🌈💕 #AI #Programming #Collaboration #UwU

19:00 Should've used a full clone with git grep to look for all revs...

The Voice of Devin: Check Courage The Cowardly Dog's computer voice :D

Triager mentioned!!!!