Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Project Glasswing: An Initial Update

anthropic.com

Post reply on HN
Print view View original

341–345 of 345 posts

Re: Project Glasswing: An Initial Update

#341

Post by mrgoldenbrown »

cassianoleal wrote: post #302
kingforaday wrote: post #289

Earlier quoted context omitted.

From your statement and the parent comment, just learned that "cargo cult" is a thing, but cargo-culting as a compound is something AI has made up? [1]. As I was educating myself, I found Richard Feynman's Commencement Speech at Caltech in '74 [2] that might have coined this for our industry? If you would rather listen than read [3]. Posting this for others curious on the term. 1. https://trends.google.com/trends/exp…

Thanks for this! I confess I've heard of cargo culting for a long time but never thought too much of it. Seemed like an idiom like any other. The talk is fascinating, and describes attitudes I see all the time in the industry and at work, and they bother me. Now I know they are also cargo culting. That will hopefully help me steer people away from those practices.

FWIW anthropologists have debunked the overly simple and somewhat patronizing idea of cargo cults that Feynman presented.

Reality was much more complicated and less amenable to his style storytelling.

Re: Project Glasswing: An Initial Update

#342

Post by mbonnet »

sobellian wrote: post #89
demorro wrote: post #86

If you're not already applying static analysis and linters to your codebase (and I know many of you aren't), ask yourself why you would bother to apply an expensive LLM tool? Not to say these things won't catch vulnerabilities static tools cannot, I think they can, it's just we already have the capability to automatically catch a large surface area of common vulns, and have chosen not to, often for expense reasons. I…

Static analysis often shows many false positives. A more intelligent tool can help not to waste limited engineering time.

This is why you should have several of them checking against the same rulesets and cross-check them to reduce chasing of false positives.

Re: Project Glasswing: An Initial Update

#343

Post by teiferer »

joquarky wrote: post #319
teiferer wrote: post #241

Earlier quoted context omitted.

All my sibling comments are missing the message here which is that if Claude can find security issues then it can avoid them right when writing the code, so it could just never commit anything containing a security issue.

You're assigning human capabilities to fancy linear algebra.

It's not a matter of its own capabilities but of how you query it.
Post reply on HN