[–] 4 points 7 months ago* (last edited 7 months ago)

Any idea what happened that allegedly caused slopped vulnerability reports to improve? https://mastodon.social/@bagder/116364045995306922 claims they got much better while not that long ago they were shutting down the bug bounty, because they were drowning in slop. Is it because people actually polish those or it's just a matter of defining a goal function and just burning the rainforest until the slop extruder hits the jackpot? Or is this another case of the LLMentalist?

  • source
  • [–] 7 points 8 months ago (2 children)

    When I do code review these days, sometimes I genuinely can't tell whether I'm talking to the person or to the slop extruder. It often ends up with me repeating the same comment over and over again.

  • source
  • parent
  • context
  • [–] 5 points 1 year ago (1 child)

    Depends on how they are used. They are extremely useful when they add context that is otherwise not present in the code, but way too often I see people simply restating what the code does in the comment. That's not very useful and can become confusing if the code later gets updated without updating the associated comment.

  • source
  • parent
  • context
  • view more: next ›