hamburgheftig@feddit.org to Technology@lemmy.worldEnglish · 3 months agoFed up with vibe coders, dev sneaks data-nuking prompt injection into their code - Ars Technicaarstechnica.comexternal-linkmessage-square160linkfedilinkarrow-up1649arrow-down112
arrow-up1637arrow-down1external-linkFed up with vibe coders, dev sneaks data-nuking prompt injection into their code - Ars Technicaarstechnica.comhamburgheftig@feddit.org to Technology@lemmy.worldEnglish · 3 months agomessage-square160linkfedilink
minus-squareAwesomeLowlander@sh.itjust.workslinkfedilinkEnglisharrow-up4arrow-down5·3 months agoIt’s an imported library, since when are devs expected to be inspecting the source code of every library they import?
minus-squareyessikg@fedia.iolinkfedilinkarrow-up4·3 months agoSince forever? Don’t you do security audits on the libraries you use?
minus-squaresakuraba@lemmy.mllinkfedilinkEnglisharrow-up4arrow-down1·3 months agoit used to be a thing but javascript npm brainrot happened
It’s an imported library, since when are devs expected to be inspecting the source code of every library they import?
Since forever? Don’t you do security audits on the libraries you use?
it used to be a thing but javascript npm brainrot happened