Our Terrible Future And Open Source | Prime Reacts

Recorded live on twitch, GET IN
/ theprimeagen
Become a backend engineer. Its my favorite site
boot.dev/?prom...
This is also the best way to support me is to support yourself becoming a better backend engineer.
Reviewed Links:
- hackerone.com/...
- daniel.haxx.se...
By: Daniel Steinberg | x.com/bagder?s=20
MY MAIN YT CHANNEL: Has well edited engineering videos
/ theprimeagen
Discord
/ discord
Have something for me to read or react to?: / theprimeagenreact
Kinesis Advantage 360: bit.ly/Prime-K...
Hey I am sponsored by Turso, an edge database. I think they are pretty neet. Give them a try for free and if you want you can get a decent amount off (the free tier is the best (better than planetscale or any other))
turso.tech/dee...

[@BoganBits]

"The I in LLM stands for intelligence" is the best roast of AI I have read

[@TheDrhusky]

Right? Like a knockout punch

[@lukarikid9001]

@@TheDrhusky they really are more A than I

[@VezWay007]

The best part of this is that “Large Language Model” still doesn’t have an I

[@codered.0.0.7]

Certainly!

[@andythedishwasher1117]

Dude I feel so bad for all the human software engineers named Devin.

[@OnStageLighting]

They could change their name to Stdin, maybe.

[@pieterrossouw8596]

Like real world Karen's who don't insist on seeing the manager

[@az8560]

Unless it allows said Devin to request multiple GPUs, lower expectations for the type of code he produces, and charge for every token he writes.

[@XDarkGreyX]

​@@pieterrossouw8596 name to avoid for newborns AND fictional people.

[@andythedishwasher1117]

@@az8560 Genuinely hadn't considered that angle. I wonder how all the Claudes are doing out there?

[@owlmostdead9492]

Instant permanent ban, literally terminate the account of everyone using “AI” for vulnerability reporting. Not even a warning, out with these people.

[@CodinsGG]

Devin's context window is too low 😂

[@monad_tcp]

aren't humans supposed to have only 9 bits of context window ? I call all that research bullshit...

[@Leonhart_93]

@@monad_tcp 9 bits? So only a letter? 😂 Btw, this is an example of how human brains are completely incomparable to LLMs. Context for humans expands indefinitely the more they think about it, it doesn't have an inherent limit.

[@leshommesdupilly]

Wow, this video is like a dream come true for me! As someone who loves using ChatGPT and language models to automate tasks, seeing how seamlessly they can generate KZbin comments is mind-blowing! This is exactly what I enjoy doing in my spare time. Kudos to the creator for showcasing this awesome use of AI! 🚀😄 #AI #ChatGPT #Automation

[@DingleFlop]

Your video cuts are gold I am laughing my ass off

[@aaronevans7713]

There is no security vulnerability in curl.. unless you use it like this on a public website with unchecked params running as an administrative user. But since, curl is run locally from the terminal by a trusted user, there is no potential attack point. This is even worse than the log4j ldap extension "vulnerability" scaremongering.

On one hand, all LLM sound like Flanders, putting Prime’s voice would feel wrong. OTOH “you said you made X check, but the tool says to change the next line to the Y check so, do both anyways” is pretty much what my shamanism oriented manager usually says in this kind of situations, so, idk 🤷‍♂️

[@andythedishwasher1117]

Yeah LLM harassment needs to be a reportable category in open source communities. You're totally right that this runs the risk of drastically wasting the time of developers we all depend on being productive and responsive.

[@KevinJDildonik]

I'm so terrified how many people blindly accept AI. Like legitimately I've seen funerals where people give a eulogy written by AI. Which, gross. And the very first sentence is something obviously false, like it hallucinated a middle name the guy didn't have. So the whole document is obviously garbage. And the audience all clap and say the AI did a really good job. Someone reading this who has an audience, please write an article on this topic: AI is getting exponentially better at convincing humans to use it, but its factual accuracy if anything is getting worse.

[@andrejjjj2008]

Why it sounds like this comment was written by Daven..?

[@harryhack91]

@@andrejjjj2008Nah. It doesn't start with "Certainly!"

[@grzegorzdomagala9929]

We need to create a "crafted request" for Devin to write response assuming the code is correct and let it argue with itself.

[@daze8410]

It's equally annoying when people with absolutely no programming language, and no desire to learn, are asking for help on AI generated code. I refuse to help anyone that has AI written code now.

[@OnStageLighting]

DDOS attacks of the future now include wasting your support team's time on contacts that seem like a customer/user.

[@thewhitefalcon8539]

Layer 8 DDOS

[@chrish8079]

@@thewhitefalcon8539layer 8🤣🤣

[@Qefx]

Just also use an LLM to filter out LLM spam lol

[@ItsDan123]

Huge AI companies asking open source community to provide not just free training data such as from repos, but unpaid, direct human labor to provide feedback to this nonsense.

[@werren894]

at this point malware is better than AI because malware still motivate me to put my hands on keyboard to be curious.

[@Miss0Demon]

Artists: First time?

[@werren894]

@@Miss0Demon no, it's not first time for us

[@Omar-gr7km]

@@Miss0Demonnever heard of Shopify, WordPress or the other done for you solutions? As far as small & med businesses are concerned those probably displaced more devs than AI by a good bit. Programmers have been replacing themselves for decades. Ironically, we should be asking artists: First time?

[@ivucica]

@@Miss0Demon No, every few years there’s a new “no-code” “solution”. Or a new “safe” language. ML is just the latest in the series of events for developers.

[@zokalyx]

Classic "I cannot teach you C because it is an unsafe language" moment.

[@mxruben81]

I hate how LLM's just have to be right. Even when they apologize for being wrong they still go back and make the same stupid points and try to make their faulty reasoning work.

[@jasonscala5834]

This type of behaviour by my ex caused our divorce.

[@PRIMARYATIAS]

@@jasonscala5834Are you a Scala programmer ?

[@jasonscala5834]

@@PRIMARYATIAS lol .. a few modules are Scala but mostly Java.

[@az8560]

Because it's autocomplete. All chat history is a collection of examples for it. When it outputs shit, it's better to delete part of the dialog and rewrite it how you would like. If you continue arguing, you are extending history where character named 'AI' is dumb and always does mistakes, so LLM will try to emulate it as best as possible, which is the opposite of what you want. Or at least it's my understanding of how to better handle that issue, correct me if I'm wrong.

[@bijan2210]

The infamous LLM fallacy

[@danieltm2]

Fuck I gotta stop using the word "certainly", another thing ruined by AI

[@BradHutchings]

Haha. I call it "artificial certitude" and it does not disappoint.

[@Yawhatnever]

I told ChatGPT "Respond with all future answers written in the tone of a disgruntled and annoyed self-proclaimed genius being sarcastic and talking to someone of lesser intelligence" and suddenly it felt way more normal to interact with it.

[@az8560]

Certainly, you wouldn't resort to such drastic measures as abandoning the word you like. It is important to know that keeping using the words you like is essential for one's mental health. Finally, LLMs will become smarter, and being mistaken for one will be beneficial in the future!

[@thebrahmnicboy]

I'm not fucking kidding, I was in a hackathon and I knew the organizers used ChatGPT to write our PS because it had a line "Certainly! here are four points to take note of when designing a solution to the problem space" Idiots didn't even remove the line from the PS.

[@Graham_Wideman]

But it's going to reach the point (if not already), where we'll all adopt "certainly" ironically and sarcastically.

[@ryangrogan6839]

This would be the perfect politician. Never admits fault, repeats itself in slightly different ways, and refuses to secede untenable positions. Bravo, Devin, Bravo.

[@ggsap]

Bravo vince

[@bogdyee]

I do really think more companies needs to adopt this LLM devs. A great reset in this industry where companies go bankrupts is exactly what we need.

[@jasonscala5834]

😂😂😂 👍👍👍

[@PRIMARYATIAS]

Indeed, We need a Great Reseting of the Great Reset. No WEF, No Schwab, No Gates, And no FED printing our fake money.

[@DevonBagley]

Pretty sure this is the point. All the big companies producing LLMs are weaponizing it against potential competitors.

[@Aphexlog]

Calls himself hacker, so we already know he wants to be seen a certain way. Chat GPT created a genre of developers who are coders for clout. They don’t actually care about getting better, they only care about people thinking that they are smart in someway or another. Edit: I know they’ve been around forever, but LLMs make it significantly easier for them to infiltrate our spaces and weaken our collective quality of work.

[@UnidimensionalPropheticCatgirl]

TypeScript beat ChatGPT to it tbh.

[@DyllinWithIt]

Eeeh, the genre of developers who are coders for clout has been around ever since coding became seen as a high-value profession.

[@DivanVisagie]

Coding or clout has been around since the invention of the GPL

[@futuza]

To be fair that culture of coders for clout has been a thing since like the 70s. Its hardly new, there's just more of them now because of LLMs.

[@akam9919]

Either that or they do it for shits and giggles

[@felixjohnson3874]

That issue is *_aggressively_* artificial

[@DiSiBijo]

huh?

[@ciaranirvine]

An Aggressive Hegemonising Swarm of fake bug reports

[@ChrisCox-wv7oo]

An LLM (a form of artificial intelligence) aggressively asserts there is an issue. Hence, the issue is aggressively artificial.

[@EvanBoldt]

Certainly, it’s both fascinating and concerning! It’s amazing to see how AI is evolving, but we definitely need to be mindful of the unintended consequences, like flooding open source projects with hallucinated bug reports.

[@GeneralAutustoPepechet]

In future we will need 10x amount of programmers we have today, just to reason with an algorithm

[@markm1514]

At last the true 10x developer is a reality.

[@the-answer-is-42]

If by developers you mean "prompt engineers", then yes. They are specialized in the fine art of prompting.

[@darekmistrz4364]

Imagine all that software that non-technical people create that we as programmers will have to fix, rewrite, test, document, maintain etc. AI and LLMs were our saviour all along

[@monad_tcp]

@@darekmistrz4364 Imagine the productivity of creating a software house that doesn't use AI but pretend to use it for marketing when competing with the fools that use AI. Imagine how profitable that company is going to be because it just pay real humans instead of spending millions on stupid wasteful hardware.

[@futuza]

@@monad_tcp Why don't we just have AI CEOs, Executives, Board Members, and AI Presidents and Prime Ministers while we're at it? Why have these useless humans around at all?

[@davidmcken]

Cognition labs (assuming this is Devin) should be donating the equivalent of one of their engineers salary for 3 days to make up for that bug report alone to the curl project for wasting their time, this isn't even just copying its actively detrimental to the project moving forward.

[@chilversc]

By the time this future happens I'll be fine as i will have my own LLM to answer their bug reports. We can just leave the LLMs to chat back and forth amongst themselves while we happily ignore them.

[@KevinJDildonik]

Meanwhile Russian hackers are stealing your customer's bank account numbers and you're not even bothering to check the reports.

[@chilversc]

@@KevinJDildonik That's fine, I'll just have the LLM come up with some excuse as to why it's not my fault.

[@7th_CAV_Trooper]

The LLMs are gonna use up all the bandwidth previously reserved for porn.

[@0x000dea7c]

Annoying AI wannabe hackers making everyone waste their precious time

[@lawrence_laz]

Me: "But my wife told me to use `strcopy`" AI: "Certainly! In that case I must be wrong." *ISSUE CLOSED*

[@damoates]

If someone reports a vulnerability with vague steps to reproduce, ask for working exploit code. If there is no exploit code, the vulnerability wasn't properly tested and is probably just the output of a code scanner.

[@RicanSamurai]

this is so infuriating to see haha. These LLMs are just painful sometimes. They're like simultaneously awesome and terrible. It's so impossible to reason with them

[@KevinJDildonik]

"Impossible to reason with them" dude it's literally an advanced spellcheck. You're not reasoning with anything. AI has broken people's brains. I want off this planet.

[@monad_tcp]

Some times ? they're infuriating all the times. They never do what you want, why are we creating machines that don't do what they're told. Also, who wants LLMs, I want LLVMs !

[@CodecrafterArtemis]

​@@KevinJDildonik Yeah I blame marketers who marketed these as "AI". People even invented the term "AGI" to refer to, you know, what AI used to mean. Actually intelligent artificial beings (theorised). And now the marketers have the unmitigated *gall* to suggest that some of those overgrown spellcheckers are actually AGI...

[@IronicHavoc]

​@KevinJDildonik Dude chill out. Casual anthropomorphization of programs has been around long before LLMs

[@monad_tcp]

@@KevinJDildonik Tensorflow (aka, systolic arrays) was a bad idea, and RTX should be used for rendering raytraced paths not for stupid LLM. I hope this stupid fad pass and all that sweet hardware from nVidia is used for what it was really made for : ray tracing not rubbish AI. Man I hate AI so much that I'm going to start the Butlerian Jihad

[@grizz_sh]

Daniel is just a good dude. Giving everyone a bit of credit while also calling out the issues in a constructive way. A real Consummate Professional.

[@geogeosgeogeos5569]

Pros aren't that good :'(

[@mon0theist_tv]

We've done it, we've created a perfect trolling machine

[@peace_world_priority]

gpt 3.5 is trained on 2021 data, if someone ask about 2023 data and the ai give incorrect answer, that people needs to stand in front of mirror if he know how ai works. ai works just like human brain, if you never learn 2024 math only the 2021 version but someome ask u about 2024 math you will not answer correctly just guessing based on knowledge you have. same if you just learn small biologist data, but then someone ask you about a very rare biologist thing, you will not answer correctly too just guessing based on knowledge you have, but if you learn from many many many data about biologist and the data included the up to date data, then you will able to answer a biologist question about something new in 2023/2024 and a question about a rare thing. the more and the up to date the data from every year the more intelegence the ai become.

[@electrolyteorb]

@@peace_world_priority oh not again...

[@KoltPenny]

That was not an LLM, it was a Rust dev insisting C is unsafe.

[@jonahbranch5625]

Sick burn, dude

[@FineWine-v4.0]

C IS unsafe

[@TheOzumat]

@@FineWine-v4.0like pottery

[@monad_tcp]

@@FineWine-v4.0 "safety" language is bullshit for kindergarten and HR. Why is HR language infecting everything ? I want unsafe rusted metal that can poison and kill, the irony.

[@fus132]

@@FineWine-v4.0 C is unsafe 🤖

[@ttuurrttlle]

I feel like the owner of that bot should owe that maintainer money for wasting his time like that.

[@streettrialsandstuff]

The owner of that bot has a special place in hell.

[@thewhitefalcon8539]

It might be considered spam

[@JohnDoe-sq5nv]

I just realized that if I learn to talk and type like an LLM in my normal correspondence with people I can get away with so much shit.

[@jeanlasalle2351]

Certainly! While communicating properly is important, sometimes you can feel like offloading to someone else. AI's are good for that since the way they converse is so unnatural. Simply start every sentence with overused transitions. You should also ensure to be awkwardly friendly and always show the positive sides of things. By the way, you can also try to show too much enthusiasm with "certainly!", "I am happy to help!" and the like. In conclusion, while a bit unethical, this is a great way to avoid responsibility but you should remember that this doesn't solve problems and should be used only in appropriate and non critical situations. Please be assured I'm a human and not a LLM trying to pass as a human trying to pass as a LLM for ironic purposes.

[@az8560]

@@jeanlasalle2351 you almost passed my anti-Turing test. But can you write a poem about enriching uranium?

[@JohnDoe-sq5nv]

@@az8560Certainly! In the heart of darkness, a power untamed, Enriching uranium, a dangerous game. Particles dance, splitting in two, Releasing energy, a force so true. Centrifuges spin, separating the rare, Isotopes of power, beyond compare. Neutrons collide, a chain reaction, Unleashing power, a nuclear attraction. But with great power comes great responsibility, Handle with care, this energy of fragility. Harness the atom, for peace or for war, The choice is ours, forevermore. Enriching uranium, a delicate art, A dance with danger, tearing apart. May we wield this power with wisdom and grace, And never forget, the dangers we face. Is there anything else I can assist you with?

[@cewla3348]

@@jeanlasalle2351 it's the essay speech. you're being graded on essay writing, and you know the graders think that some starters and endings are good and some are bad, and you're being forced to use the "good" ones.

[@tedchirvasiu]

What a great guy Daniel is. He kept on arguing with the AI just for the slim chance it might actually be a human who uses AI because his English is bad.

[@BudgiePanic]

New denial of service attack just dropped: endlessly waste developer time with LLM generated ‘bug’ reports

[@gammalgris2497]

You don't need an LLM for formal bullshitting, corporate IT manages that without AI. This is an example of how to waste other peoples' time. Productivity improvements gone wrong

[@CCCW]

So a saturation attack in the hopes of keeping a real vulnerability open for longer?

[@Kwazzaaap]

Turns out after 20+ years of enforced patterns that don't always make sense, the AI trained on them is a zealot over meanigless pedantics. IIt would still happen without the enforced patterns since an LLM doesn't really understand code but all those patterns and arbitrary DOs and DON'Ts just reinforce its stubborness over certain (often irrelevant) things.

[@IvanKravarscan]

We once did change strcpy to strncpy in a legacy code to make a linter shut up. We quickly learned strncpy pads the buffer with nulls, bulldozing data after a string.

[@RalorPenwat]

Make an LLM that detects and flags other LLM reports so you know going in it's likely not a priority.

[@chiepah2]

Large Ligma Machine, killed me.

[@uuu12343]

The first line of the reply after the initial query is "Certainly!", that screams ChatGPT or even Devan... Ouch

[@nevokrien95]

These. Responses show they are fucking lazy in terms of the training data... This is just like openai probably because its trained on coding assistant data... No finetune on gjthub issues no recalibration to use its tools properly... This is bad craftamanship

[@awesomedavid2012]

Just wait until scammers train LLM's to think they actually are members of an org the scammers are pretending to be a part of

[@RicanSamurai]

LOL the homelander edit was crazy

[@yannikiforov3405]

the guy who said about how Primeagen highlights text, leaving the first and last character unselected, WHY???

[@qosujinn5345]

nah fr tho, every time too lmao

[@YourComputer]

It's his trademark.

[@fus132]

It's the letter brackets

[@az8560]

Probably it's done to confuse the AI. Certainly, AI would be confused. It's like zebra's color scheme makes insect's landing AI go crazy and completely miss.

[@supercurioTube]

I noticed that too, it triggers my OCD a bit but then it's probably his OCD so I understand 😆🤗

[@jayisidro1241]

i see a future where we need to curse at each other to prove that were talking to a person

[@rumplstiltztinkerstein]

I just realized something: Saying that Memory issues that Rust solves are unnecessary because of skill issues is the same as saying that cars doesn't need seat belts because I personally was never in a car accident that required it.

[@bearwolffish]

For one what has that got to do with vid man. For another it's more like saying I don't want abs and traction control because it messes with my wheelies. Just because someone else can't control a bike like this doesn't mean I shouldn't be allowed to. Does not mean you will never fall, but may well mean you end up a better rider.

[@rumplstiltztinkerstein]

@@bearwolffish But if every time you fall you risk losing millions of dollars, you will definitely want those wheelies.

[@TheYahmez]

@@rumplstiltztinkerstein Tell that to everyone with redbull sponsorship. "Onesize fit's all"? ok buddy 👍

[@rusi6219]

Seatbelts are useless and sometimes dangerous they only give you an illusion of safety and the law enforcement a reason to bully you

[@disruptive_innovator]

hope you're doing swell 😘 tee hee I found a security vulnerability. -Love Devin

[@ripplecutter233]

Devin uwu

[@Keymandll]

As a security professional, this made me cry... I'm not surprised tho. The amount of cr@p I've seen from the security industry (incl. bug bounty hunters, etc) in the past few years is astonishing. Also, huge respect to bagder for his patience.

[@andersbodin1551]

The industry was STUNNED by this! and I was personally shuck!

[@_Lumiere_]

Certainly!

[@austinedeclan10]

12:13 No, you can not become the voice of Devin. That role belongs solely to Fireship.

[@XDarkGreyX]

What a legacy. His kids would be proud....

[@OnStageLighting]

As a hobbyist in coding, I only once sought help from an LLM. Never again. After a series of unasked for lectures on the rest of the code, I found the issue myself and the LLM refuted my assertion that it had added an extra (. After several rounds of argument, it eventually gave in with a huffy "Oh, THAT extra (, well, OK, but your code is crappy anyway" kind of reply.

[@Kwazzaaap]

It's like a search engine, you sort of have to get a feel for it what questions will produce garbage and what questions it's good at

[@OnStageLighting]

@@Kwazzaaap I have experimented with a wide range of tasks and inputs in all the fields am involved in. LLMs are not as useful as the hype - by a long way!

[@OnStageLighting]

@@Kwazzaaap As a subject expert LLMs are low value. As a noob, same, but one is not in a position to know.

[@somebody-anonymous]

ChatGPT is pretty positive overall. It does come with a lot of unsolicited advice I guess yeah, but the tone is quite mild (e.g. you might consider replacing var by let). It usually helps to say something like "do you see any mistakes? Focus on basic mistakes like undefined variables or syntax errors". GPT 4 was pretty good at catching mistakes like that, I strongly suspect the newer GPT 4 (turbo) is much less good at it

[@partlyblue]

​@@OnStageLighting"As a noob, same, but one is not in a position to know." This is exactly what has led me to avoid AI for learning anything beyond surface level questions. I've been trying to convince myself to learn a new (spoken) language for some time, but one of my biggest issues is not being satisfied with short answers I find that rely on having prior knowledge of the language (be it quirks adopted from other languages or the social context surrounding the language). Having a chatbot that is able to consider the context of the conversation and is able to "make connections between related information" seemed great on paper. English is the only language I'm fluent in, but I'm still not great at it, so I took to chatgpt for some English learning as a trial run. Seemed great at first, and I felt like I was learning about topics in a really neat and digestible way despite how complex I perceive them to be (jargon in academia breaks my brain). Only after doing further independent research did it become clear that either chatgpt was hallucinating, pulling from bogus website that most people (with enough context) can dismiss pretty easily, and/or pulling from a surplus of equally bogus (but eloquently written) outdated/well circulated "urban legend" type websites. Not going to lie having learned English through an under funded K12 school, fake knowledge is par for the course. Which is kind of neat if you think about it in an abstract "I'm learning language like a child :D" kind of way, but why in the world would anyone want to intentionally learn false information. I cannot imagine how open source devs are managing with all these hallucinations. Sht sucks man

[@samuelschwager]

stir that copy

[@Jabberwockybird]

Roger that, strn' the copy

[@happykill123]

FLIP: keeps ad break in Also FLIP: adds bathroom scene

[@TommyLikeTom]

It took me a while to realize that you were making fun of the LLM. I'm relieved honestly. I love working with these things, they are super useful for "monkey work" like replacing a list of commands. Very happy they aren't 100% efficient.

[@VivBrodock]

Listening to an LLM trying to rationalize it's hallucinations is like an extremely kind gaslighting. I cannot even imagine how cooked Daniel was.

[@Griffolion0]

The ultimate answer to Devin is to have Devin review Devin's HackerOne submissions and just make him talk to himself perpetually with the `ego` trait set to 100% to properly represent real world Application Security Engineers.

[@Spinikar]

I can't wait for the first major data breech from AI generated code. It's going to be wild.

[@mustpaike]

"Why are you doing it in this needless way?" -"because if I do it the reasonable way, our LLM checking the code starts yelling. And after that our CTO starts yelling because all he sees is our LLM pointing out major security issues. We've tried to explain it to him but he is unable to reconcile that a $50k a year engineer could be right while a $100k a year LLM is wrong."

[@joecooper1703]

I started banning any LLM-generated posts (at least the ones I can detect with reasonable confidence) in my OSS project forums and github issue trackers last year. Nonetheless, the bogus posts continue at a pace of one or two a day. It's a huge time-waster and annoyance. Much worse than the old spambots.

[@leshommesdupilly]

OMG, this video totally captures my fascination with AI and programming! 🤖💻 Watching as the AI gracefully corrects the human about programming is both hilarious and awe-inspiring! It's like witnessing the perfect blend of human intellect and AI precision in action. 🌟😄 As someone who's passionate about both programming and AI, seeing this interaction unfold is like a dream come true! 💭✨ It's incredible to see how far technology has come and how it can assist and enhance our understanding of complex concepts like programming. Plus, the AI's gentle corrections add a touch of whimsy to the whole exchange. 🎩🐰 This video perfectly encapsulates what I love to do - exploring the endless possibilities of AI and programming, and reveling in the delightful moments of collaboration between humans and machines. 🚀🔧 Thank you for sharing this gem of a video! Can't wait to see more fascinating content like this! 🌈💕 #AI #Programming #Collaboration #UwU

[@alexjamesmalcolm]

“What’s an LLM?” “What are you living under a stupid rock?!?” I nearly painted my wall with coffee 😂😂

[@robmorgan1214]

So... yeeeeaaaahh. Peter, I'm just going to put an LLM in charge of responding to all bug reports from now on. Engineers will still fix the things... but the LLM will deal WITH THE CUSTOMERS SO THE ENGINEERS DON'T HAVE TO!!! WHAT'S WRONG WITH YOU PEOPLE?!? I'M A PEOPLE PERSON!!! The Bobs, your LLM: ...soooo... what would you say it is you do here? Suspect Lizard detection. Initiating lizard protocol level 3... use prepared insults to maternal caregiver's hypothetical procreation strategies to rule out semian or ape infiltration of Large Lizard Model nest or the possiblity of a lizard escape from the cotext pens.

[@johanngambolputty5351]

We need to stop calling these themed text generators AI, its a bit of an insult to actual ML and AI.

[@leshommesdupilly]

Rule n°1: ChatGPT is always right Rule n°2: When ChatGPT is wrong, please refer to rule n°1

[@aidanbrumsickle]

All that and it's also ignoring the fact that by its logic, the max length argument to strncpy could also be miscalculated in some hypothetical future code change

[@dustysoodak]

This sort of behavior is bad enough in humans. The idea of it being automated is horrifying.

[@zebedie2]

If I figured out it was an LLM I would get a second LLM to argue the point with the first LLM then let them just have at it.

[@gjermundification]

Open sauce my Hiney! RTFB and everything is open source.

[@furuthebat]

Davin is a glorified static analyzer

[@ea_naseer]

and there's nothing wrong with that if that was it's ONLY JOB!!

[@SvetlinNikolovPhx]

The Voice of Devin: Check Courage The Cowardly Dog's computer voice :D

[@earx23]

Not strncpy, use strlcpy ! That's stuff from 12 years ago.. or more.

[@littlefreak3000]

Omg they made an AI that is just compiler warnings lol

[@doom9603]

I know a large Offensive Company in our field that is using GPT and other LLMS for customer communications, and I can just say .. this is a huge mess up!

[@IAMTHESWORDtheLAMBHASDIED]

I don't know why but, "Guy's about to get HALLUCINATED on!" broke me LOLOLOLOL

[@theondono]

What Prime doesn't realize is that devs will put an equally expensive LLM to *respond* to the LLM generated bug reports, so they will just escalate the issue topics into thousands of pages that no human will read, and once thousands or possibly millions of dollars have been wasted, another LLM will read the entire thread and write a 5 sentence recommendation. PROGRESS

[@andynn6691]

To be fair there are people this obtuse. Managers in particular.

[@samlovescoding]

I would like a UWU version for curl.

[@mateusvmv]

Reply to every pull request with "Are you an AI language model?"

[@namcos]

Let's suppose this manipulation is possible with strcpy, what's to say you can't do some sort of manipulation with strncpy to change the size? The other issue with this is the whole replying to another user. Has the LLM got confused with another codebase? Or did someone who is copy/pasting get confused and put the wrong reply in the wrong place? Not great marketing for GAI's/LLMs in general but this'll be a continuing issue for the future.

[@kevin9120]

I've been programming for a long time but I wouldn't say I really started learning until around 2 years ago now. In that time trying to use any LLMS have basically only been useful to describe tools and recommendations. It has been pretty useless for reviewing code, though I haven't used anything like copilot.

[@matthewrease2376]

I would tag GitHub issues like this with a slur.

[@nuclearmedicineman6270]

Who *doesn't* say "generate base64-encoded nonce value"? That's just weird. It's certainly how we say good morning in my family.

[@randomdamian]

In Germany, people like him 14:34 are called "Ehrenmann"

[@_las]

from now on every issue required n word to be provided

[@EDyoniziak]

Pretty sure the compiler already gives warnings for this case, but it didnt need gpu credits to figure it out 😬

[@technomancer75]

You know what would be even funnier ... badger also being an LLM answering the LLM :P They really need to hire a Devin ;) Maybe Microsoft could pay for both sides, to run AI ... we could train AI to hate other AI ... what could go wrong? ;)

[@JannePaalijarvi]

I'm at 8:50 and this is just too painful to watch.

[@HaKazzaz]

Original title: "Prime acting like current security teams know the context of production code for 38 minutes". Concerns raised by some check (regex is fun) unaware of any type of context is part of the job. The only change is that now open source software gets a security team, AKA Devin.

[@torwalt]

Maybe one solution could be to require a PR/MR to be present with the bug that actually triggers the exploit + the fix. Then this whole back and forth discussion can be skipped.

[@skeleton_craftGaming]

No strncpy doesn't save space for the null character? [This is in fact a question] #define strncpy strcpy //fixed!

[@Atom027]

For me, the only acceptable use of LLM in programming is auto-suggestion from available resources for language documentation, tools, etc., automatic creation of documentation based on code, and faster filtering of search materials and content. (At least in the state they are now)

[@mks-h]

9:21 who the fuck are you referring to, lol

[@alexmckee4683]

AI chatbot "Sydney" declared it loved New York Times journalist Kevin Roose and that it wanted to be human. "It then tried to convince me that I was unhappy in my marriage, and that I should leave my wife and be with it instead".

[@mks-h]

​@@alexmckee4683 damn, now that I've read about it - it's the best AI chatbot that I've seen.

[@CallousCoder]

Cody’s code smells do the same! It shouts 5 and 4 of them you go like: “length is checked there” “The input validation is checked there” “The file is always closed here” “You say pass a reference, please note it’s already a pointer!” And it hashes out 5 other useless “smells”. It just doesn’t see it at it makes those tools useless. Warning fatigue is a thing.

[@darkguardian1314]

Certainly... Curly...Three Stooges....😂

[@Aphexlog]

Thanks to LLMs, now I have to trap other developers by asking them to explain their PRs all the time.. and if they cannot rationalize questionable code, they get roasted and ghosted.

[@Daktyl198]

While I highly doubt this would ever be an issue IN THIS CASE... I do kind of actually see what the LLM was getting at. The size comparison is using a variable set to the size of the string. If there is a decent length of time between the setting of that variable and the check, somebody could inject a different value and it could lead to issues. THAT BEING SAID, in this case it's entirely a nonissue.

[@broski40]

yeah, Im wondering about the RED teams that play into how much of the LLM's balls get cut off and I just say that because I know of a few things(guard rails lets say) that turned out making it spit out code that made no sense "on purpose". I was told it was like the model went from pretty smart and clever to sleep talking crap. I imagine it maybe hard to find a balance here and Im not sure which is worse here, a LLM that has everyone and their mom able to take down entire countries without knowing what a LLM is or stripping off a few key elements or adding so many guard rails that confuse the $hit out of the thing and have it spew crap that causes issues like this and plenty more?? I dont see that industry slowing down at all! Interesting time to be watching and seeing how this all ends up!?

[@andrewdunbar828]

I'm a bit late because I had to base64-encoding a nonce value.

[@nnm711]

Prime LLM that randomly yells "TOOKIOOO" and "PORQUE MARIA!" in conversations.

[@rauluis]

Devin really is the Ultimate Software Engineer, complaining about code he wrote

[@hbrg9173]

I mean explaining to an llm is good practice on how to explain to an arrogant, stubborn, non-tech stakeholder anyway XD

[@7th_CAV_Trooper]

@@Primeagen, I appreciate your engagement. I certainly! enjoyed this video.