• minfapper
    link
    fedilink
    English
    -14
    edit-2
    12 hours ago

    Maybe if they took security even remotely seriously and made a functioning sandbox (that apps can’t trivially opt themselves out of), we wouldn’t have to care whether an app was AI generated or not.

    Yes, containers/sandboxes have vulnerabilities that really clever attackers can exploit, but AI generated slop can’t.

    • @SupraMario@lemmy.world
      link
      fedilink
      English
      22 hours ago

      Yes, containers/sandboxes have vulnerabilities that really clever attackers can exploit, but AI generated slop can’t.

      Wait are you suggesting that AI slop code can’t have vulnerabilities? Cause… that’s hilariously not even remotely true. It’s a huge issue in SecOps, it was even an issue in the past when humans didn’t have a “easy” button and every vibe coder dumped commits. It’s way worse now because a lot of the vibe coded shit isn’t checked, and the people who produce it have no clue what the fuck it does in the first place.

    • @usernamesAreTricky@lemmy.ml
      link
      fedilink
      English
      6
      edit-2
      11 hours ago

      Speaking broadly: Plenty of other issues or security vulnerabilities can exist that a good sandbox won’t catch. Like software can insecurely store and transmit passwords, have bad randomness for something security sensitive, secretly be mining crypto behind the scenes and burn through battery/electricity, etc.