Top
Best
New

Posted by ymir_e 13 hours ago

SQLite Critical CVEs or LLM Slop?(research.jfrog.com)
692 points | 344 commentspage 4
myshapeprotocol 10 hours ago|
Wild catch. This highlights just how critical precise dependency vetting is for core database engines.
Joel_Mckay 7 hours ago||
Sue them for defamation.

Seriously, the hubris on these "AI" sloppy clowns needs consequences. =3

hnjbx769kd 8 hours ago||
Underrated wisdom here
throwa356262 12 hours ago||
In the mean time, my very real vulnerability reports are not even acknowledged because maintainers are busy handling this kind of nonsense.
chrisjj 5 hours ago|
Does author rep not count for something?
account42 12 hours ago||
The irony of writing an article about slop reports and then defacing it with a giant unrelated slop image at the top.
pelasaco 11 hours ago|
I had the impression that the code review done and text formatting by the jfrog was mostly driven by Claude too..
luciana1u 11 hours ago||
imagine being a maintainer and having to write "this code does not exist" in a CVE response
r_lee 11 hours ago||
can anyone explain what value does the ai slop image at the top add to this blog post?
dpacmittal 7 hours ago||
The duality of LLMs is real. On one hand, they are solving unsolved math problems, on the other hand they get fooled by the strawberry test or the car wash test.

We see this all the time on reddit and HN, where some users are building crazy things with LLM and others are swearing by how useless LLMs are. Some people claim SWE will be dead in a few years, and others are claiming the AI bubble is going to burst anytime now.

GeorgeWBasic 5 hours ago|
The "AI bubble" refers to the massive overinvestment in AI, and doesn't imply that LLMs are going to go away after it pops.
wang_li 11 hours ago|
There should be some sort of defamation lawsuit possible when people publicly publish trash repos or reports like this. If you were writing a competing product in a safe language you’d love to see such FUD.
inigyou 10 hours ago|
It might be possible, but we'll only find out if a lawsuit actually takes place.
More comments...