• NSAbot@lemmy.ca
    link
    fedilink
    English
    arrow-up
    92
    ·
    edit-2
    2 days ago

    Slow has nothing to do with pen testing or not. Pen testing is how you validate that the code is secure, AI or no. This is showing a shocking lack of care about security for a company pretending to offer a secure product.

    • Fiery@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      4
      arrow-down
      10
      ·
      1 day ago

      Best of all, that really is something LLMs are quite good at too. Aikido has a feature where you whitebox pentest your entire application.

    • hirihit640@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      3
      arrow-down
      41
      ·
      2 days ago

      Without the entire slack exchange, it’s not clear whether Andy Yen was responding exclusively to the call for pentesting, or towards broader comments about AI code.

      • filcuk@feddit.uk
        link
        fedilink
        English
        arrow-up
        56
        ·
        2 days ago

        Look I’ll be honest, a CEO telling his workers their (valid) opinions are bullshit and looser thinking is absolutely unacceptable, even putting the context of security (or lack thereof) aside. If you refuse to listen to your engineers as a leadership, you have failed miserably.

        • hirihit640@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          2
          ·
          1 day ago

          I also found the comments pretty inflammatory, which makes me wonder what the engineers had said to get the conversation to that point. I don’t like to make judgement without the full context