1398
you are viewing a single comment's thread
view the rest of the comments
[-] electric@lemmy.world 60 points 1 year ago

Is the implication that he made a super insecure program and left the token for his AI thing in the code as well? Or is he actually being hacked because others are coping?

[-] grue@lemmy.world 156 points 1 year ago

Nobody knows. Literally nobody, including him, because he doesn't understand the code!

[-] unexposedhazard@discuss.tchncs.de 46 points 1 year ago

Nah the people doing the pro bono pen testing know. At least for the frontend side and maybe some of the backend.

[-] 1024_Kibibytes@lemm.ee 14 points 1 year ago

But the things doing the testing could be bots instead of human actors, so it may very well be that no human does in fact know.

[-] unexposedhazard@discuss.tchncs.de 24 points 1 year ago* (last edited 1 year ago)

Thought so too, but nah. Unless that bot is very intelligent and can read and humorously respond to social media posts by settings its fake domain.

[-] 1024_Kibibytes@lemm.ee 4 points 1 year ago

Good point! Thanks for pointing that out.

[-] mindbleach@sh.itjust.works 8 points 1 year ago

I'm stealing "pro bono pen testing."

Cant steal it, if it is already pro bono :D

[-] electric@lemmy.world 5 points 1 year ago

That's fucking hilarious then.

[-] jewbacca117@lemmy.world 27 points 1 year ago

AI writes shitty code that's full of security holes, and Leo here has probably taken zero steps to further secure his code. He broadcasts his AI written software and its open season for hackers.

[-] T156@lemmy.world 11 points 1 year ago

Not just, but he literally advertised himself as not being technical. That seems to be just asking for an open season.

[-] Ephera@lemmy.ml 9 points 1 year ago

Potentially both, but you don't really have to ask to be hacked. Just put something into the public internet and automated scanning tools will start checking your service for popular vulnerabilities.

[-] JustAnotherKay@lemmy.world 8 points 1 year ago

He told them which AI he used to make the entire codebase. I'd bet it's way easier to RE the "make a full SaaS suite" prompt than it is to RE the code itself once it's compiled.

Someone probably poked around with the AI until they found a way to abuse his SaaS

[-] RedditWanderer@lemmy.world 3 points 1 year ago

Doesn't really matter. The important bit is he has no idea either. (It's likely the former and he's blaming the weirdos trying to get in)

this post was submitted on 17 Mar 2025
1398 points (99.8% liked)

Programmer Humor

41902 readers
8 users here now

Post funny things about programming here! (Or just rant about your favourite programming language.)

Rules:

founded 6 years ago
MODERATORS