Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I don't mean to pick on you specifically, but this kind of approach doesn't fit the way I like to work.

For example, just because the manifest.json worked doesn't mean it is correct - is it free of issues (security or otherwise)?

I would argue that every system in production today seemed to "just work" when it was built and initially tested, and yet how many serious issues are in the wild today (security or otherwise)?

I prefer to take a little more time solving problems, gaining an understanding of WHY things are done certain ways, and some insight into potential problems that may arise in the future even if something seems to work at first glance.

Now I get that you are just talking about a small chrome extension that maybe you are only using for yourself... but scaling that up to anything beyond that seems like a ticking time bomb to me.



I feel like you would get more benefit out of GPT. you could ask it if it finds any vulnerabilities, common mistakes, other inconstancies. please provide comments on what each line does. what are some other common ways to write this line of code, etc.

what are some ways to handle this XYZ problem. I see you might have missed sql injection attacks. would that apply here?

Same goes for code you find on the internet.

I got this out put for this line of code what do you think the problem is.


Big misunderstanding about those chat-bot AIs.

Even OpenAI says clearly: You should not, by any means, ask the AI any questions you don't know the answer already!

> more benefit out of GPT. you could ask it if it finds any vulnerabilities, common mistakes, other inconstancies. please provide comments on what each line does. what are some other common ways to write this line of code, etc.

And than it spits out some completely made up bullshit…

How would you know if you don't understand what you're actually doing?


Every time I've tried chatgpt I've been shocked at the mistakes. It isn't a good tool to use if you care about correctness, and I care about correctness.

It may be able to regurgitate code for simple tasks, but that's all I've seen it get right.


You using 3.5 or 4?


Makes no difference. Both versions are mostly a bullshit generator.

But to see that you actually need to know in detail the things you're asking about.

After using it for some time I'm by now quite surprised when this thingy gets something actually right. But that are very seldom cases.


Most managers don't care for people like you. Companies sell their product. Another successful fiscal year. Irregardless of the absolute shit code base, wasteful architecture and gaping security vulnerabilities.


Maybe, but I've always had lucrative jobs and my work has always been appreciated. Maybe you just have to find the right employer. I think longer-term, employers that value high quality work will have the upper-hand.

And to be honest, I don't care for managers like that, so the feeling is mutual.


What managers? The LLM will do their job first.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: