You assume I'm a vibe coder. I'm an engineer with more than two decades of experience, with my last role at a Fortune 500 company. I review every line of code I check in. - ThreadSky

electile.bsky.social • 24 days ago

You assume I'm a vibe coder. I'm an engineer with more than two decades of experience, with my last role at a Fortune 500 company.

I review every line of code I check in.

Comments

lucasdoesart.bsky.social•24 days ago

You *aren't* an algorithm, meaning you *can't* pick up everything an algorithm might slip in. If you do not intricately understand not just every line, but every fucking character of the code you check in, congrats, you just embedded security vulnerabilities in your code. And the 3rd party

electile.bsky.social•24 days ago

Do you just not know what code reviews are and how they are used?

lucasdoesart.bsky.social•24 days ago

I do, and I know that LLMs have a tendency to create new and potentially dangerous things that look innocuous to both humans and human made algorithms. There is always a chance that something approved by experienced humans and even the best code checking algorithms is going to be vulnerable or

lucasdoesart.bsky.social•24 days ago

Poisoned by the LLM. Not to mention LLMs have somewhat predictable outputs, (not predictable by humans, but other algorithms). Meaning that while this may be unproblematic for a time, these patterns may be caught on by nefarious parties and exploited, making every vibe coded shit program vulnerable.

electile.bsky.social•24 days ago

You are absolutely right, that happens. Something becoming more common is "slopsquatting" where hallucinated library names are created with ill intent.

That's why code reviews exist.

lucasdoesart.bsky.social•24 days ago

Again, code reviews by what? Humans, and human created algorithms? Sure, that'll work for a time, but the progress is so far exponential. Meaning the latest LLMs (or newer forms of AI chatbot) will produce highly problematic code that not humans nor the best code checking algorithms can check.

lucasdoesart.bsky.social•24 days ago

Server argument still stands entirely untouched by you, the vibe coder.

Posting Rules

Be respectful to others
No spam or self-promotion
Stay on topic
Follow Bluesky's terms of service

Comments

Posting Rules

Reply