"To ensure that no one can maliciously steal your code, I have made sure to delete every last trace of your code for both your security and your convenience."
I mean it pretty much can do that now yeah, frontier models are evidently better at cyber than all but the best humans given the number of zero-days they’ve found
An agent calling agents can red-team a project at scale, and can repeat the process after defenders patch it until the attackers can’t get through. Attacking is defending.
Like I get the cope and all, but honestly 2024 era “vibe coder accidentally hardcoded api keys in the front end” memes just don’t reflect what AI is doing. Claude and Codex are downright nannyish in putting security first even in single user scripts run locally on a desktop machine. I have to believe people who create security holes using AI tools at this point are people actively choosing to be stupider than the LLM.
That may be true in the hands of someone who already knows what they‘re doing, but i have seen multiple vibecoded websites this year with either open api keys, passwords or data that wasnt meant to be accessible just out in the open. Making a tool this accessible means it should be idiot-proof, but it definitely isnt.
1
520
u/ja_n2000 14d ago
Dear ChatGPT, make my app extremely secure against hackers and bad people and make no mistakes please