logoalt Hacker News

59nadirtoday at 6:08 AM2 repliesview on HN

Intrinsically simple and straight forward problems are easier to secure even with mediocre or bad code. They've already shown that Opus 4.6 can find and report on very sophisticated security issues[0] so I'm not sure that analysis (and perhaps especially security analysis) is the biggest issue with LLMs.

Mind you, I'm not using LLMs for professional programming since I prefer knowing everything inside and out in the code that I work on, but I have tried a bunch of different modes of use (spec-driven + entire implementation by Opus 4.6, latest Codex and Composer 2, and entirely "vibecoded", as well as minor changes) and can say that for trivial in-house things it's actually usable.

Do I prefer to rewrite it entirely manually if I want something that I actually like? Yes. Do I think that not everything needs to be treated that way if you just want an initial version you can tinker with? Also yes.

0: https://youtu.be/1sd26pWhfmg


Replies

rakel_rakeltoday at 8:39 AM

> I'm not sure that analysis (and perhaps especially security analysis) is the biggest issue with LLMs.

I was replying to the statement that "maybe code quality is really not that important for trivial things", not whether LLM's are good at analysis nor not.

Thanks for the link though, looks like an interesting talk!

otabdeveloper4today at 7:05 AM

> can find and report on some very sophisticated security issues sometimes

Fixed it for you.