1389
you are viewing a single comment's thread
view the rest of the comments
[-] electric@lemmy.world 60 points 2 months ago

Is the implication that he made a super insecure program and left the token for his AI thing in the code as well? Or is he actually being hacked because others are coping?

[-] grue@lemmy.world 156 points 2 months ago

Nobody knows. Literally nobody, including him, because he doesn't understand the code!

[-] unexposedhazard@discuss.tchncs.de 46 points 2 months ago

Nah the people doing the pro bono pen testing know. At least for the frontend side and maybe some of the backend.

[-] 1024_Kibibytes@lemm.ee 14 points 2 months ago

But the things doing the testing could be bots instead of human actors, so it may very well be that no human does in fact know.

[-] unexposedhazard@discuss.tchncs.de 24 points 2 months ago* (last edited 2 months ago)

Thought so too, but nah. Unless that bot is very intelligent and can read and humorously respond to social media posts by settings its fake domain.

[-] 1024_Kibibytes@lemm.ee 4 points 2 months ago

Good point! Thanks for pointing that out.

[-] mindbleach@sh.itjust.works 8 points 2 months ago

I'm stealing "pro bono pen testing."

[-] unexposedhazard@discuss.tchncs.de 4 points 2 months ago

Cant steal it, if it is already pro bono :D

[-] electric@lemmy.world 5 points 2 months ago

That's fucking hilarious then.

[-] big_slap@lemmy.world 3 points 2 months ago
[-] jewbacca117@lemmy.world 27 points 2 months ago

AI writes shitty code that's full of security holes, and Leo here has probably taken zero steps to further secure his code. He broadcasts his AI written software and its open season for hackers.

[-] T156@lemmy.world 11 points 2 months ago

Not just, but he literally advertised himself as not being technical. That seems to be just asking for an open season.

[-] Ephera@lemmy.ml 9 points 2 months ago

Potentially both, but you don't really have to ask to be hacked. Just put something into the public internet and automated scanning tools will start checking your service for popular vulnerabilities.

[-] JustAnotherKay@lemmy.world 8 points 2 months ago

He told them which AI he used to make the entire codebase. I'd bet it's way easier to RE the "make a full SaaS suite" prompt than it is to RE the code itself once it's compiled.

Someone probably poked around with the AI until they found a way to abuse his SaaS

[-] RedditWanderer@lemmy.world 3 points 2 months ago

Doesn't really matter. The important bit is he has no idea either. (It's likely the former and he's blaming the weirdos trying to get in)

this post was submitted on 17 Mar 2025
1389 points (99.8% liked)

Programmer Humor

35897 readers
915 users here now

Post funny things about programming here! (Or just rant about your favourite programming language.)

Rules:

founded 5 years ago
MODERATORS