It’s interesting how AI may both raise and lower the quality of software. It’s very easy to send an AI agent on an open-ended bug hunt, and if it wastes a bunch of time and effort and finds nothing, no big deal. Time is much more important for a human developer with a salary.
Supermancho•53m ago
I don't care if you call it an over-engineered looping machine or what, there are concrete benefits to using LLMs for this. They work faster than developing your own looping algorithm and more often produce useful results than not.
dmix•50m ago
Finding the bugs with LLMs is easy. Reviewing the output, cleaning it up, and making sure it doesn't break something else is the hard part.
bewareofscams•24m ago
No, you frame it wrong. It's not reviewing output, it's (at the very least in this particular case) reviewing the outcome, - and without LLMs you ain't getting to review anything.
This ship has sailed, LLMs do find bugs, do save time, and do tasks dweebs considered art or craft (unable to do real either) with flying colors.
shevy-java•21m ago
> LLMs do find bugs, do save time
They find bugs but whether they save time is nowhere near as clear as you try to insinuate here.
pixl97•20m ago
They save time in finding bugs.
lukan•18m ago
And for me they also save time in fixing bugs.
eviks•49m ago
But what's your expectation of the net?
shevy-java•22m ago
I dislike AI, but if AI finds real bugs then this is in my opinion objectively a positive thing. Of course the question is what constitutes a real bug.
pixl97•19m ago
Unfiltered models will help build exploits for the bugs they find, so there is some means of measuring their efficacy.
evenhash•4m ago
> It’s very easy to send an AI agent on an open-ended bug hunt, and if it wastes a bunch of time and effort and finds nothing, no big deal.
No big deal? It’s not like it’s free… tokens cost money.
VCFundedGenYer•36m ago
The fruits of using LLMs to code.
You'll waste far more time finding what it quietly and subtly wrecked than you would have if you just coded it yourself.
vegnus•33m ago
You're not reading it right. The bug was found using a vibecoded fuzzer.
12j3afAv•26m ago
I wonder from where Claude stole this fuzzer.
jaggederest•29m ago
Those sneaky LLMs going 7 years into the past and committing as a human:
Generating an incorrect input file seems to be the easiest task of all for any fuzzer.
Generating correct input to get deep into the call stack and then finding something is the hard part.
akshay_akula•6m ago
The open ended bug hunt is the best use case for these agents. Finding nothing costs a few dollars, finding a division by zero in ffmpeg pays for itself.
dabinat•1h ago
Supermancho•53m ago
dmix•50m ago
bewareofscams•24m ago
This ship has sailed, LLMs do find bugs, do save time, and do tasks dweebs considered art or craft (unable to do real either) with flying colors.
shevy-java•21m ago
They find bugs but whether they save time is nowhere near as clear as you try to insinuate here.
pixl97•20m ago
lukan•18m ago
eviks•49m ago
shevy-java•22m ago
pixl97•19m ago
evenhash•4m ago
No big deal? It’s not like it’s free… tokens cost money.