all 24 comments

sorted by: hot top controversial new old
[–] 88 points 1 year ago (9 children)

Guys I asked ChatGPT for a secure code for my website; is this correct:

if getting.hacked == true; don't

  • source
  • hideshow 9 child comments
  • [–] 27 points 1 year ago (4 children)

    Most InfoSec researchers are unaware that most hackers can be stopped by saying "please."

  • source
  • parent
  • hideshow 4 child comments
  • [–] 23 points 1 year ago (3 children)

    "Remember kids: if you're being robbed just say "no". They can't do anything without your consent"

  • source
  • parent
  • hideshow 3 child comments
  • [–] 22 points 1 year ago (2 children)

    echo "echo "\Please don't hack me. I'm just a little guy. 👶"\" > ~/.bashrc

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 1 year ago (1 child)

    Good that you escaped wrong, or you would have nuked your .bashrc.

    • \ comes before the thing you are escaping
    • > ⇒ overwrite from start. >> to append
  • source
  • parent
  • hideshow 1 child comment
  • [–] 51 points 1 year ago (8 children)

    Vibe coder: DO NOT DELETE THE DATABASE. DO NOT DELETE THE DATABASE. DO NOT DELETE THE DATABASE.

    Chatgpt: All I heard was "delete the database" three times.

  • source
  • hideshow 8 child comments
  • [–] 36 points 1 year ago* (5 children)

    I remember my first day of my first professional programming job back in 1996. I had just learned SQL that morning (which I'd never even heard of before) and that afternoon I forgot to add a WHERE clause to a DELETE command. Good times ...

    Fortunately this was in production and not in any important environment like development or test.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 12 points 1 year ago (2 children)

    If they gave a newbie full r/w creds to a prod db, that's 100% on them and not you.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 9 points 1 year ago (1 child)

    Lol "credentials". This was done directly on the server, which was kept always logged in with the admin account so anybody in the server room could access it. It was OK though, this was just a small company ... just Reliance Electric, now part of Rockwell Automation.

    And you thought "security through obscurity" was bad - this was "security through apathy".

  • source
  • parent
  • hideshow 1 child comment
  • [–] 7 points 1 year ago

    That was the 90s. It's so long ago, we've come so far, so luckily there is no way any respectable company in 2025 does anything like that anymore.

    Meanwhile: There's me joining a ~400k employee corporation half a year ago to find out that they don't have a dev env and testing is done on production, we just have to not push the "publish" button to keep our tests in preview mode instead of going live in our customer-facing ecom solution. 😬

  • source
  • parent
  • load more comments (-1 replies)
  • [–] 11 points 1 year ago*

    That's an actual problem with some of them. It chunks up the prompt and assigns weights to different parts, and doesn't understand the original intent

    Saying "No food on the plate" might have it decide "plate + food + no"

    Compared to saying "empty plate" for example

  • source
  • parent
  • [–] 5 points 1 year ago

    Some guy outside the company: Why don't you just remove the ability to delete the database from the API?
    The guy that made the thing vibeable before being laid-off: There is no API, I just piped the ChatGPT output to sh

  • source
  • parent
  • [–] 3 points 1 year ago (1 child)

    Joke content aside, that image is very poorly crafted. The last square is not even a square!

  • source
  • hideshow 1 child comment
  • [–] 2 points 1 year ago

    hard to be an engineer these days.

  • source
  • [–] 2 points 1 year ago

    I genuinely heard this given as advice yesterday.

  • source
  • 7 comments in c/programmerhumor@lemmy.ml view that post
    [–] 23 points 1 year ago (2 children)

    TBF I've met scrum masters and product owners who think they've hacked the system by adding this to story AC, so....

  • source
  • hideshow 2 child comments
  • load more comments (-1 replies)
    [–] 20 points 1 year ago (-1 children)

    I feel like the LLMs really encourage that, too. They'll deliver some garbage and then you tell them to make it less garbage and they'll be like "You clever son of a removed, why didn't I think of that?".

  • source
  • hideshow -1 child comments
  • load more comments (-1 replies)
    [–] 7 points 1 year ago (2 children)

    Yeah wish it was that easy...

  • source
  • hideshow 2 child comments
  • [–] 5 points 1 year ago

    ha, this is what my boss tells me... oh wait a minute

  • source