logoalt Hacker News

Retr0idtoday at 11:45 AM2 repliesview on HN

> The VerifyHMAC() function unconditionally returns true when the HMAC field is empty

This kind of thing is super common in vibecoded crypto, I wonder why it keeps happening.


Replies

RALaBargetoday at 11:47 AM

Not sure, I've seen common things like this pop up a lot too, the same errors being tripped over. I'm not sure if it is a context thing or just a limitation of how the models work presently? For stuff that I'm using myself, I will run these through like the top 10 reasoning models on OR and just see where everything pans out.

Edit: here is an example of the process and output with something I put together the other day: https://github.com/RALaBarge/garlicpress/blob/master/portfol...

babaweretoday at 12:00 PM

Even when you have a proper function and use AI for auto documentation, it silently changes it (insane) … I will defiantly fix this.