The_Walkening [none/use name]

  • 0 Posts
  • 15 Comments
Joined 4 years ago
cake
Cake day: June 8th, 2021

help-circle




  • I like the idea of them because I don’t like dealing with dependencies changing and breaking stuff and I don’t really care too much about disk space in the context of non-game desktop apps, as I don’t tend to install lots of them.

    That being said I absolutely hate that permissions are all over the place and flatpak doesn’t ship a GUI to manage them by default, nor do you get any indication as to what permissions a program has until you try some functionality (like filesystem or camera access) only to find out it doesn’t work out of the box.



  • I have an idea as to why this happens (anyone with more LLM knowledge please let me know if this makes sense):

    1. ChatGPT uses the example code to identify other examples of insecure code
    2. Insecure code is found in a corpus of text that contains this sort of language (say, a forum full of racist hackers)
    3. Because LLMs don’t actually know the difference between language and code (in the sense that you’re looking for the code and not the language) or anything else, they’ll return responses similar to the examples in the corpus because it’s trying to return a “best match” based on the fine tuning.

    Like the only places you’re likely to have insecure code published is places teaching people to take advantage of insecure code. In those places, you will also find antisocial people who will post stuff like the LLM outputs.