Comment by heikkilevanto
17 hours ago
Ownership is one question. IMO, a more interesting question is who is responsible when the code does some real-life damage.
17 hours ago
Ownership is one question. IMO, a more interesting question is who is responsible when the code does some real-life damage.
Why should it be any different than it ever was? If a release manager checked it but didn’t catch the vulnerability, they have some culpability. If the developer shipped the code without checking it, they have some culpability too. Ultimately, if they both work under an organization that they report to, they’re responsible to that organization, which is, in turn, accountable to its customers (and investors perhaps.)
LLMs really change nothing about this.
No one. The usual.