AwesomeLowlander comments on Fed up with vibe coders, dev sneaks data-nuking prompt injection into their code

[–] AwesomeLowlander@sh.itjust.works 0 points 3 months ago (12 children)

It's an imported library, since when are devs expected to be inspecting the source code of every library they import?

parent

[–] Cocodapuf@lemmy.world 1 point 3 months ago* (last edited 3 months ago) (11 children)

I don't like to use libraries I don't understand. Probably part why I'm not a professional developer, but it's the principle of the thing - don't put out code you can't vouch for.

I mean, yes, it's way easier to just use the library, trust it works; but by that logic, it's also way easier to just let an llm code for you.

permalink

fedilink

source

parent

hideshow 11 child comments

[–] AwesomeLowlander@sh.itjust.works 5 points 3 months ago (3 children)

Probably part why I'm not a professional developer, but it's the principle of the thing

There's no 'principle' here, that's something that simply would not be possible in any sort of large project. To suggest all professional software developers read every line of every library before using it is ridiculously unworkable.

permalink

fedilink

source

parent

hideshow 3 child comments

[+] Cocodapuf@lemmy.world -1 points 3 months ago* (2 children)

[deleted]

permalink

fedilink

source

parent

hideshow 2 child comments

[–] AwesomeLowlander@sh.itjust.works 1 point 3 months ago (1 child)

? Do you have me confused with somebody else?

permalink

fedilink

source

parent

hideshow 1 child comment

[–] Cocodapuf@lemmy.world 1 point 3 months ago

That's fair, I made an assumption there. I'll just delete the comment.

permalink

fedilink

source

parent

[–] amju_wolf@pawb.social 3 points 3 months ago (1 child)

...but do yoz "understand libraries" by reading every line of their code, or by reading the documentation? And only in the parts you're actually interested in?

permalink

fedilink

source

parent

hideshow 1 child comment

[–] Cocodapuf@lemmy.world 1 point 3 months ago

Yeah, a general understanding is enough. But I think yeah, actually skim over the code, at least get a basic idea about how the internal methods work. Depending on what you're using the library for, it could be prudent to know more about how data structures are handled.

Honestly, you'll probably learn something in the process.

permalink

fedilink

source

parent