Comment by Silagi
3 hours ago
I've been working on a game server in rust, and every once in a while a review will just stop and refuse to explain what happened. So I know there's a security issue in there somewhere, but neither OAI nor Ant models will tell me what it is. Despite the whole thing, top to bottom, having been built in the last two months on the system they're working on.
Planning to hop on openrouter this weekend to chase it down, but man, it's rough knowing I've already burned the tokens to find it probably half a dozen times at this point, but don't have any information that would help point me at it.
"I've been working on..."
Vs
"...system they're working on"
"I know there's a security issue... [Nobody] will tell me what it is"
"I don't have any information..."
This might sound crazy, but have you tried looking at "your" code base?
It's just genuinely baffling to read stuff like this.
I can't imagine feeling so helpless on something I was supposedly "working on".
That seems like the least charitable reading of what I wrote.
"system they're working on" refers to the actual physical hardware.
Yes, I look at the code regularly, and a significant portion is hand written, especially the performance critical sections.
A security issue I haven't been able to track came up in automated code reviews. Maybe you're such a savant that you can crack any security issue in a codebase you're working on, but the last few months of critical security bugs in infrastructure with the most experienced and capable maintainers in the world should at least humble you a little.