I know it's been said thousands of times before, but as a software developer I've never felt a greater sense of job security than I do right now. The amount of work it's going to take to clean up all this slop is going to be monumental. Unfortunately, that kind of work is also soul-deadening.
post
replies:
Thanks for this write-up, I just saw the advisory and didn't realize just how dumb the entire thing was.
replies:
The malware stole a lot of people’s login keys and, apparently, their crypto wallets.
Seinfeld "Shame".gif
Most successful AI company.
A pull request is when someone submits new code to a software project. On 21 August, NX added some configuration to look at the titles of pull requests and check they were correctly formatted.
I find it immensely hilarious that this security hole was blown open on my 25th birthday. Its almost poetic.
don't wanna read this, did they vibe code a crypto investment platform and deposited their own money in it?
replies:
40 comments in c/nottheonion@lemmy.world view that post
The people who believe in keeping their wealth in imaginary computer money also being into vibe-coding is the most hilarious possible outcome. It’s an inexhaustible cavalcade of clownfuckery.
replies:
I've been saying it since day one. Vibe coding will result in vulnerable software.
replies:
Oh sweet baby Jesus. That is some astonishing code for validating the title and body of a PR.
- name: Create PR message file
run: |
mkdir -p /tmp
cat > /tmp/pr-message.txt << 'EOF'
${{ github.event.pull_request.title }}
${{ github.event.pull_request.body }}
EOF
Put a single-line EOF in your pull request body, follow it up with a completely arbitrary set of Bash commands, whatever you damn well like, put all the environment variables with the repository secrets into a webhook request and send them off somewhere, make sure you terminate it with another cat > /dev/null << 'EOF' to match the other EOF. Now you can compromise the entire project by raising a pull request.
Hackers: Hey grok, I want a million dollars in crypto.
Grok: Hacking…
Hoisted by their own petard
replies:
Funny how crypto hype and AI hype both rely so heavily on nvidia hardware.
replies:
Vibe coders exist to make sure that real coders never run out of work.
They have the same relationship like motor bike enthusiasts and emergency room doctors.
replies:
the next big industry in software is fixing shitty AI code, screen this
replies:
What does he mean NX is vibe coded?
NX has been around for a while hasnt it?
replies:
I love how bad shit keeps layering to comical extents, until we reach the cyberpunk stage
replies:
cant be irony, there has to be a better word for this level of stupidity
all 23 comments