• rockerface🇺🇦
    link
    fedilink
    English
    2374 months ago

    the consensus seems to be that adding instructions to code that sabotage other people’s work goes too far

    Luckily, the LLM coding isnt people’s work

    • teft
      link
      fedilink
      English
      1184 months ago

      the consensus seems to be that adding instructions to code that sabotage other people’s work goes too far

      I mean, my thought would be “Don’t fucking run code that you don’t understand”.

      • @frongt@lemmy.zip
        link
        fedilink
        English
        444 months ago

        If we all followed that rule, we’d be using nothing more complex than an 8080.

        • @this@sh.itjust.works
          link
          fedilink
          English
          194 months ago

          True, but I would think developers should at least be following it with the code they’re actually working on.

          • AwesomeLowlander
            link
            fedilink
            English
            -14 months ago

            It’s an imported library, since when are devs expected to be inspecting the source code of every library they import?

            • yessikg
              link
              fedilink
              54 months ago

              Since forever? Don’t you do security audits on the libraries you use?

              • AwesomeLowlander
                link
                fedilink
                English
                14 months ago

                One person from the team, maybe. You don’t have every single dev read every line of code in the libraries, which is what is being specified here

        • @Cocodapuf@lemmy.world
          link
          fedilink
          English
          124 months ago

          Well, I think it’s legit to use software without understanding the code or use hardware without understanding the specifics of the logical mechanisms of the silicon. But when you’re writing software, you really should know what’s in your own code. Anything else is bad form in my opinion.

          • AwesomeLowlander
            link
            fedilink
            English
            04 months ago

            It’s an imported library, since when are devs expected to be inspecting the source code of every library they import?

            • @Cocodapuf@lemmy.world
              link
              fedilink
              English
              1
              edit-2
              4 months ago

              I don’t like to use libraries I don’t understand. Probably part why I’m not a professional developer, but it’s the principle of the thing - don’t put out code you can’t vouch for.

              I mean, yes, it’s way easier to just use the library, trust it works; but by that logic, it’s also way easier to just let an llm code for you.

              • AwesomeLowlander
                link
                fedilink
                English
                54 months ago

                Probably part why I’m not a professional developer, but it’s the principle of the thing

                There’s no ‘principle’ here, that’s something that simply would not be possible in any sort of large project. To suggest all professional software developers read every line of every library before using it is ridiculously unworkable.

              • Amju Wolf
                link
                fedilink
                English
                34 months ago

                …but do yoz “understand libraries” by reading every line of their code, or by reading the documentation? And only in the parts you’re actually interested in?

                • @Cocodapuf@lemmy.world
                  link
                  fedilink
                  English
                  14 months ago

                  Yeah, a general understanding is enough. But I think yeah, actually skim over the code, at least get a basic idea about how the internal methods work. Depending on what you’re using the library for, it could be prudent to know more about how data structures are handled.

                  Honestly, you’ll probably learn something in the process.

        • @RaphaelSchmitz@feddit.org
          link
          fedilink
          English
          124 months ago

          The code YOU run. If your code runs other code, that doesn’t fall under this.

          “Don’t ride a car unless you know how driving a car works” doesn’t mean you need to understand the chemical composition of the metal in the motor parts

      • @Smoogs@lemmy.world
        link
        fedilink
        English
        8
        edit-2
        4 months ago

        it was always a risk in stack overflow so i dont see why suddenly the world needs to exclusively create safe spaces for all the ‘down with safe spaces’ crowd.

    • Rothe
      link
      fedilink
      English
      414 months ago

      It’s the stolen work of other people.

      • @Jakeroxs@sh.itjust.works
        link
        fedilink
        English
        -64 months ago

        Like all of human knowledge, I swear you antillm people are out of your mind.

        Here we have a way to bring coding and creation to the masses at a much lower bar and most of the LLM projects I see are MIT licensed, it’s literally a revolution for open source but half of you are pearl clutching and acting like god damn Microsoft.

    • Billegh
      link
      fedilink
      English
      64 months ago

      I think that’s the problem though, isn’t it. It is other people’s work, condensed down into what could semi-accurately be called a statistics based random word generator. If LLMs were good at it or had people checking behind then that were good we wouldn’t be in this mess in the first place.

      • rockerface🇺🇦
        link
        fedilink
        English
        134 months ago

        I meant more the process of generating code via LLM isn’t work. The end result ultimately uses someone else’s work, yes, but the process can be and should be sabotaged.

    • @sunbytes@lemmy.world
      link
      fedilink
      English
      14 months ago

      So long as the person is using some form of version control, it’s effectively just a slap on the wrist.