Comment by Maxatar
10 months ago
Does it? At least my experience is that ChatGPT goes super hard on security, heavily promoting the use of best practices.
Maybe they used Grok ;P
10 months ago
Does it? At least my experience is that ChatGPT goes super hard on security, heavily promoting the use of best practices.
Maybe they used Grok ;P
> At least my experience is that ChatGPT goes super hard on security, heavily promoting the use of best practices.
Not my experience at all. Every LLM produces lots of trivial SQLI/XSS/other-injection vulnerabilities. Worse they seem to completely authorization business logic, error handling, and logging even when prompted to do so.
Post-edit window, the above should read “…completely skip authorization…”