Scary "Grampus" Jerry 👻 on Nostr: nprofile1q…zy2w2 I think the challenge we are approaching is that the genAI tools ...

nprofile1qyt8wumn8ghj7un9d3shjtnyd968gmewwp6kytcqyraf77xcsp6dsepjdthrjged6t7kufvtqyz256k36cs6skqsh6fcs4zy2w2 (nprofile…y2w2) I think the challenge we are approaching is that the genAI tools are able to generate far more code than can reasonably be reviewed by a person while at the same time businesses are using that code production ability as leverage to decrease the number of developers leaving even fewer people to review even more code. Meaning the code probably isn't getting reviewed much any more. Hopefully the genAI code generation and security tools get better. I expect that we're going to start seeing some common patterns of vulnerabilities that evade normal SAST/DAST tools, meaning that we could get to a future where many unrelated applications have similar types of vulnerabilities. Those could be due to people making the same mistakes in their prompting, or accidental/intentional problems with the generated code...