Potential issues in curl found using AI assisted tools

Post by thedougd » Mon, Oct 06, 2025, 5:26 PM UTC

the_jeremy wrote: post #186

ronsor wrote: post #183

To anyone who thinks about our current situation for than a few minutes, AI is * Clearly useful to people who are already competent developers and security researchers * Utterly useless to people who have no clue what they're doing But the latter group's incompetency does not make AI useless in the same way that a fighter jet is not useless because a toddler cannot pilot it.

> * Utterly useless to people who have no clue what they're doing I disagree. I'm making a board game of 6 colors of hexes, and I wanted to be able to easily edit the board. The first time around, I used a screenshot of a bunch of hexagons and used paint to color them (tedious, ugly, not transparent, poor quality). This time, I asked ChatGPT to make an SVG of the board and then make a JS script so that clicking on a…

Post by yencabulator » Fri, Oct 10, 2025, 10:47 PM UTC

CharlesW wrote: post #43

flohofwoe wrote: post #4

This is exactly what I'd want from an 'AI coding companion'. Don't write or fix the code for me (thanks but I can manage that on my own with much less hassle), but instead tell me which places in the code look suspicious and where I need to have a closer look. When I ask Claude to find bugs in my 20kloc C library it more or less just splits the file(s) into smaller chunks and greps for specific code patterns and in t…

> When I ask Claude to find bugs in my 20kloc C library it more or less just splits the file(s) into smaller chunks and greps for specific code patterns and in the end just gives me a list of my own FIXME comments (lol), which tbh is quite underwhelming - a simple bash script could do that too. Here's a technique that often works well for me: When you get unexpectedly poor results, ask the LLM what it thinks an effec…