top | item 42623956

(no title)

jonvk | 1 year ago

This example illustrates one of the risks of using LLMs without subject expertise though. I just tested this with claude and got that exact same validation method back. Using string comparison is dangerous from a security perspective [1], so this is essentially unsafe validation, and there was no warning in the response about this.

1. https://sqreen.github.io/DevelopersSecurityBestPractices/tim...

discuss

order

jpc0|1 year ago

Are you talking about the timing based attacks on that website which fails miserably at rendering a useable page on mobile?