71
The fastest, smoothest way to transfer files to anyone, anywhere. Your files go straight from device to device - encrypted, with no accounts, tracking, ads, or cloud storage in between (dashbeam.net)
submitted 3 months ago by to c/foss@beehaw.org
37 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 15 points 3 months ago (1 child)

Not sure how important this is to anyone, but this does look as though it was heavily leveraging Claude and Cursor. May not be a bad thing, depending on the dev's usage of those agents, but I do think it's important to know.

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
  • [–] 11 points 3 months ago

    regardless of whatever else you think about AI, it's a good idea to be very wary about security-sensitive apps that are written using LLMs.

    there's a self-hostable S3 replacement called RustFS, with development that leans heavily on LLMs.

    they had a security vulnerabilty last year.

    one LLM-written commit added a complete authentication bypass to the code. literally, you could just send rustfs rpc as the auth token instead of an actual token.

    it was fixed in a pull request named fix: Prevent panic in GetMetrics gRPC handler on invalid input which claimed to fix a different auth problem and just coincidentally removed the hardcoded auth token.

    security stuff is hard, and LLMs are prone to over-confidence. that's a bad combo.

  • permalink
  • fedilink
  • source
  • parent