

I hate to say it, but there’s a lot of “vibe coders” that use AI to write their code, then they (or someone else) use AI to review it. No human brains involved.
Aussie living in the San Francisco Bay Area.
Coding since 1998.
.NET Foundation member. C# fan
https://d.sb/
Mastodon: @dan@d.sb


I hate to say it, but there’s a lot of “vibe coders” that use AI to write their code, then they (or someone else) use AI to review it. No human brains involved.


The article says:
None of the tools produced exploitable SQL injection or cross-site scripting
but I’ve seen exactly this. After years of not seeing any SQL injection vulnerabilities (due to the large increase in ORM usage plus the fact that pretty much every query library supports/uses prepared statements now), I caught one while reviewing vibe-coded code written generated by someone else.


It wasn’t a dox attempt though. The blog just collected information that was already publicly available on other sites.


In this case, their CAPTCHA page intentionally included code to DoS a particular blog, sending a request to search for a random string every 300ms (search is very CPU-intensive). This was regardless of the archived site you were trying to view.


This is understandable, but at the same time, none of the anti-paywall lists are as good as archive.today. They actually have paid accounts at a bunch of paywalled sites, and use them when scraping.


Discord doesn’t get as many clicks compared to the larger companies, since fewer people know about it. For articles like this, news publishers always list the most well-known brands.


I think people don’t realise that if AI fails, it’s pretty much guaranteed to collapse the US economy.
It must be a lot of work to self-host DigitalOcean.
Haha good point - maybe “generated by” is a better description?